4d0032bde9
o Move nfs_reserved_port_only out of security profiles (where it was set somewhat improperly) to the Security options menu directly. Previously, the variable was set to true for Moderate, but not for Extreme, which is at best inconsistent. o Update the Security Profiles help file to remove reference to the NFS reserved port. o Note that the kernel currently defaults the sysctl to '0', but sysinstall has changed it to '1' as a default as of late; however, rc.conf sets the value to NO as the default. This change brings them relatively into sync. Sponsored by: DARPA, NAI Labs
11 lines
399 B
Plaintext
11 lines
399 B
Plaintext
Please see the FreeBSD FAQ for more detailed information on security
|
|
profiles. The following table is intended to give you a rough idea just
|
|
which services are enabled (or disabled) by each of the canned security
|
|
profiles:
|
|
|
|
Extreme Medium
|
|
------- ------
|
|
sendmail NO YES
|
|
sshd NO YES
|
|
securelevel YES (2) NO
|