Re: Securing FreeBSD.

From: Albert Shih <Albert.Shih_at_obspm.fr>
Date: Fri, 04 Apr 2025 20:01:42 UTC 
Le 04/04/2025 à 11:45:16-0700, David Christensen a écrit
> On 4/4/25 10:13, Albert Shih wrote:
> > Hi everyone.
> > 
> > Is they are any way to secure a FreeBSD to prevent destroying data ?
> > 
> > I find out even with
> > 
> >    kern.securelevel=2
> > 
> 
> It sounds like you want read-only storage media (?).

Yeah...exactly. The purpose is to recycle some old server to create some
«non erasable» backup in addition to our «normal» backup. 

They are two thing I will not consider in the equation :

  Security problem in FreeBSD. 
  Physical access to the server. 

beside that I want to make the server safest as possible. 
 
> Burning your data to a CD-R/DVD-R/BD-R disc comes to mind.

well....not possible. Too many To. And the data change daily. 

> Another option is a USB flash drive with a physical write-protect switch:
> 
> https://www.kanguru.com/products/defender-elite30-usb-3-0-hardware-encrypted-flash-drive
> 
> https://www.kanguru.com/products/kanguru-defender-elite300-fips-140-2-certified-secure-superspeed-usb-3-0-hardware-encrypted-flash-drive?variant=41077736833139
> 

Same issue. Not possible. 

Regards.

-- 
Albert SHIH 🦫 🐸
France
Heure locale/Local time:
ven. 04 avril 2025 21:56:07 CEST