FreeBSD Desktop Security - **Read Description First **

Поделиться
HTML-код
  • Опубликовано: 19 окт 2024

Комментарии • 48

  • @RoboNuggie
    @RoboNuggie  2 года назад +4

    The ssh config really didn't need to be done as it turns out FreeBSD doesn't allow root login, is actually the default :-) Tanks to Vermaden for pointing this, I should have know, but no harm done, at least you know that it's there by default!!

  • @82issa
    @82issa 2 года назад +3

    Your videos are the reason I get excited to check youtube. Thank you so much. Very soothing voice for narrating such technical content. I'm always curious what RoboNugget of gold I'll learn of next.

    • @RoboNuggie
      @RoboNuggie  2 года назад +1

      That's much appreciated Nadim! I'm learning when I make a video, so I guess we'll learn together :-)

  • @grizzlythegarliceater
    @grizzlythegarliceater 2 года назад +2

    RoboNuggieBSD OS, secure by default with fancy WM CDE , really love it Sir... :-)

  • @dawnS33ker
    @dawnS33ker 7 месяцев назад +1

    I have been following your videos for almost 2 weeks and I just want to say, Thank you. You're doing a terrific job . 👏👏

    • @RoboNuggie
      @RoboNuggie  7 месяцев назад

      Wow, thank you!

    • @dawnS33ker
      @dawnS33ker 7 месяцев назад

      @@RoboNuggie Thanks to your videos, I now have a FreeBSD laptop and I'm loving it😎

  • @xerxesscmidt5726
    @xerxesscmidt5726 2 года назад +3

    As always a great video. I'd recommend the tool lynis for system auditing. It comes with a bunch of checks and suggestions.

  • @Nyarkfunky
    @Nyarkfunky Год назад +1

    Thank you for your work. This video is really great. 🙂

  • @jacobergh7940
    @jacobergh7940 2 года назад +2

    Thank you @Robonuggie! you are a legend sir!

    • @RoboNuggie
      @RoboNuggie  2 года назад +1

      You're welcome! I'm not so much a legend, more of a leg-end :-)

    • @jacobergh7940
      @jacobergh7940 2 года назад

      @@RoboNuggie My whole FreeBSD desktop is running with everything i prefer, thanks to your videos and some documentation. Making FreeBSD easy to understand :)

  • @MrLukealbanese
    @MrLukealbanese 2 года назад +2

    Thanks Chris - very useful indeed!!

  • @OldNerdPlayingOldPCGames
    @OldNerdPlayingOldPCGames 2 года назад +1

    Old Nerd supporting 👍 big like for ya 👍

  • @ЧумовойБацил
    @ЧумовойБацил 2 года назад +2

    Отличное видео!
    Только я бы всё же посоветовал (особенно новичкам) использовать не ipfw а pf, он такой же быстрый и надёжный как и ipfw, но его настройка и логика работы гораздо, гораздо проще.
    Great video!
    Only I would still advise (especially for beginners) to use not ipfw but pf, it is as fast and reliable as ipfw, but its configuration and logic is much, much easier.

    • @RoboNuggie
      @RoboNuggie  2 года назад

      Спасибо за просмотр!
      I'll have to have another look at pf :-)

  • @reptilicusrex4748
    @reptilicusrex4748 2 года назад +1

    Another good video. Thanks for making it.

  • @fanoflogic87
    @fanoflogic87 2 года назад +2

    Thank you for your videos! They are very informative.
    However I would like to ask, my FreeBSD runs as samba server. How can I let samba pass throughout the ipfw? I have tried modifying rc.firewall but I have difficulties making it work. Thanks!

    • @RoboNuggie
      @RoboNuggie  2 года назад

      (A little late sorry)
      Try this, message 19:
      forums.freebsd.org/threads/what-are-correct-ipfw-settings-for-samba.19675/
      It essentially advises to open TCP/UDP -
      81
      137
      138
      139
      445
      Read the example given first....

  • @po3chleb3
    @po3chleb3 2 года назад +1

    Very very usefull. Thanks

  • @ygjt76v0-----
    @ygjt76v0----- 2 года назад +2

    Thankssss make video for me.... i always support your channel recomend to new freebsd user like me

  • @stoyanstoyanov1717
    @stoyanstoyanov1717 2 года назад +4

    I LOVE CDE!!!

    • @RoboNuggie
      @RoboNuggie  2 года назад +1

      Me too.... it takes me back to the early 90's...

  • @steambsdfreeos553
    @steambsdfreeos553 2 года назад +2

    Good security tweak. Also very important extensions for browser, like no-js-script, vpn, hide name of browser. Also i dont know, how work freebsd with TPM2 module in bios like windows 11.

    • @RoboNuggie
      @RoboNuggie  2 года назад +1

      Good question about the TPM2 module.... there are three ports/packages available for FreeBSD - they may cover what you are asking about (I don't have any TPM2 machines)
      tpm2-abrmd
      tpm2-tools
      tpm2-tss
      www.freebsd.org/cgi/ports.cgi?query=TPM2&stype=all&sektion=all

    • @steambsdfreeos553
      @steambsdfreeos553 2 года назад

      @@RoboNuggie Thanks!

    • @user-tm3fz7qx3s
      @user-tm3fz7qx3s 2 года назад +1

      Best part of modern UNIX-like operating systems is that they don't force you to use it, but it's rather your choice.

  • @Felix-ve9hs
    @Felix-ve9hs Год назад +1

    9:56 the last time I checked, the doas manpage on FreeBSD 13.1 said that nopass option only works on OpenBSD.
    Has this functionality also been ported to FreeBSD while I wasn't looking?

    • @RoboNuggie
      @RoboNuggie  Год назад

      As far as I know it's available, I'm not sure when it cam in....
      man.freebsd.org/cgi/man.cgi?query=doas.conf&sektion=5&format=html

  • @jimmiejaz
    @jimmiejaz 2 года назад +1

    grep firewall /etc/rc.conf no need to use cat |grep. Why use two commands and a pipe when one will do?

  • @prakashj7199
    @prakashj7199 2 года назад +2

    I am fed up with Gnome 41 on FreeBSD. There is no sound now. Before installing Gnome-41, audio was working fine. I am curious if any of you seasoned FreeBSD users suggest a Window Manager with file explorer similar to nautilus and as well as looks something that of 2021 rather than 90s? Don't take offence; I run Ubuntu, Devuan Gnome 40/41 desktops and I really prefer the less interfering clean design of Gnome DE. But, unlike KDE, the the Gnome developers seems to be less interested in getting Gnome DE to work nicely in BSDs. So, suggestions welcome. Please no KDE/Xfce/Mate etc.

    • @RoboNuggie
      @RoboNuggie  2 года назад +1

      Hi Prakash
      Cinnamon? I know it's Gnome with Plugins, but it's worth a try :-)
      Maybe Lumina?

    • @prakashj7199
      @prakashj7199 2 года назад

      @@RoboNuggie is Cinnamon packages up to date? I am told to stick with KDE Plasma in FreeBSD forums. Thanks.

    • @RoboNuggie
      @RoboNuggie  2 года назад +2

      @@prakashj7199 KDE is a good choice, but you did ask for a non KDE/ Gnome/XFCE with a file manager :-) Cinnamon is at 4.8x, so just a little behind, nothing too bad....

    • @grizzlythegarliceater
      @grizzlythegarliceater 2 года назад +1

      Check RoboNuggie videos about desktop-installer and auto-admin, the tools might useful for deciding DE also it can configure sound as well, for DE maybe Enlightenment it's an artistic :-)

  • @JasondeCordoba
    @JasondeCordoba 2 года назад +1

    It's my impression that the final command should have been #pkg upgrade

    • @RoboNuggie
      @RoboNuggie  2 года назад +1

      Sorry for the late response Jason, yes you are right, but in this case and I should have stated that I had, previous to this video already updated *then* upgrade some packages, so when I did it again, no packages where available to upgrade... I knew it, but what good is that to the viewer? Lol, my bad.... but yes, I should have done that even if there wasn't any upgrades to be had, just to show the complete process.... thank you, I need prodding sometimes...

  • @geoffreyvanpelt6147
    @geoffreyvanpelt6147 2 года назад +1

    Can the doas command not require a password for command subsets? Say for exemple, allow users to snapshot their home directories but require password for deleting snapshots.

    • @RoboNuggie
      @RoboNuggie  2 года назад +1

      An interesting question, I suppose you could create a bash (sh) script for each required action, tell doas to allow non-password for that script if it's been set to executable....

  • @somacruz8272
    @somacruz8272 2 года назад +1

    is CDE safe to use or is this NsCDE?

    • @RoboNuggie
      @RoboNuggie  2 года назад +1

      I think this was NsCDE.... but you can use CDE as long as you remember it is an old piece of software and may have unpatched security issues....

  • @jotawski
    @jotawski Год назад

    🌹❤️🌹
    🙏