how to harden freebsd?

[Dominic Mitchell]

On Mon, Jan 23, 2006 at 04:59:02PM +0000, Dominic Mitchell wrote:
> On Mon, Jan 23, 2006 at 05:42:42PM +0100, Roger Grosswiler wrote:
> > i think about jailing some "processes" on a new freebsd-system. Is there
> > also another way, to harden freebsd e.g. like selinux?
> 
> Have a look at security(7) for an overview of the existing FreeBSD
> security options.  Also, jail(8) has some bits.
> 
> There's no /direct/ SELinux, although much of the same ground is covered
> by the TrustedBSD stuff.  Have a look over the web site:
> 
>   http://www.trustedbsd.org/

Whilst others have pointed at the MAC section in the handbook, you might
like this little introduction on the subject:

    http://hacks.oreilly.com/pub/h/1466

-Dom