Searches without login should now work. You must get asked to click a button.
Port details
lockdownHardening script for FreeBSD
2.0.0_2securityΣ=13 2.0.0_2Version of this port present on the latest quarterly branch.
FORBIDDEN: Renders system unbootable DEPRECATED: Renders system unbootable This port expired on: 2018-09-30 IGNORE: is forbidden: Renders system unbootable
There is no maintainer for this port.
Any concerns regarding this port should be directed to the FreeBSD Ports mailing list via ports@FreeBSD.org
Lockdown is a script designed to harden a FreeBSD system by editing the
system's configuration files and set permissions, flags and ownership on SUID,
GID and "information" files. However, the main goal of lockdown is to
centralize knowledge on how much you can harden the system without breaking
it.
Mirror: http://lockdown.loproc.dk/
WWW: http://lockdown.TruNet.dk/
Remove expired ports:
2018-09-29 net/ntp-devel: Use net/ntp instead
2018-09-29 net/xrdp-devel: Use net/xrdp instead
2018-09-29 net/tigervnc-devel: Use net/tigervnc instead
2018-09-29 net/unison-devel: Use net/unison instead
2018-09-30 textproc/p5-IDNA-Punycode: Deprecated by upstream
2018-08-15 graphics/gnustep-slideshowkit: unknown license
2018-08-15 graphics/gnustep-slideshow: depends on expiring
graphics/gnustep-slideshowkit
2018-09-30 security/lockdown: Renders system unbootable
2018-09-30 devel/p5-Search-Binary: Deprecated by upstream, use
List::BinarySearch instead
2018-09-30 devel/p5-ExtUtils-Command: ExtUtils::Command has been re-incorporated
to ExtUtils-MakeMaker since 7.06, use devel/ExtUtils-MakeMaker instead
2018-09-30 editors/yui: Unmaintained upstream
2018-09-29 x11/tint-devel: Use x11/tint instead
security/lockdown: mark FORBIDDEN as it renders the system unbootable
By inspection I see that the port sets the obsolete 'nodev' flag in
/etc/fstab, and it really needs careful review for use with contemporary
FreeBSD; upstream is gone.
Reported by: Jeffrey Bouquet on -current
Approved by: sbruno
Bump PORTREVISION for changed CFLAGS
I adjusted CFLAGS in several ports to allow linking with lld on i386 but
missed the corresponding PORTREVISION bump.
Related commits:
r480023 r480045 r480047 r480048 r480049 r480061 r480062 r480068
Reported by: antoine
Approved by: antoine
security/lockdown: add -fPIC on i386, to allow linking with lld
By default lld does not allow non-PIC code where PIC is required.
Other architectures already apply -fPIC; do so for i386 as well.
Approved by: portmgr (lld blanket)
Sponsored by: The FreeBSD Foundation
Reset maintainer
<db@TruNet.dk>: Host or domain name not found. Name service error for
name=TruNet.dk type=AAAA: Host not found
Sponsored by: DK Hostmaster A/S
Adds -fPIC to CFLAGS_aarch64 to a number of ports that already have it
in the amd64 CFLAGS and are failing to build.
Approved by: bapt
Differential Revision: https://reviews.freebsd.org/D3321
Remove more tags from pkg-descr files fo the form:
- Name
em@i.l
or variations thereof. While I'm here also fix some whitespace and other
formatting errors, including moving WWW: to the last line in the file.
Fix build on amd64 with -fPIC
PR: ports/84156
Submitted by: Hirohisa Yamaguchi
Approved by: maintainer
Note w.r.t. 4.x: The .depend-issue can be fixed through 'gmake'.
However, then it still needs a patch for a missing <sys/time.h>, and still
won't build with neither gcc-2.95, 3.4 or 4.0, so I didn't bother.
Add lockdown 0.1:
Lockdown is a hardening system written in C++ for FreeBSD
and released under the BSD license.
Lockdown was designed to harden FreeBSD's base system. It does so
by editing the systems configuration files and set permissions,
flags and ownership on SUID, GID and information files.
Lockdown was meant to be run only once, so you can quickly
and without forgetting something, get a secure system running.
WWW: http://lockdown.TruNet.dk/
PR: 62714
Submitted by: Daniel Blankensteiner <db@TruNet.dk>
