2
votes
0answers
23 views

How to use a separated user with GUI on OpenBSD?

A webbrowser is a GREAT attack vector since people use it to access the "dangerous" internet. Very bad things can come in through to the desktop. So in general for a desktop, we can do the ...
4
votes
1answer
116 views

Why doesn't GCM HTTPS work with nginx?

Since these two are using GCM (Galois/Counter Mode): www.ssllabs.com: ECDHE-RSA-AES256-GCM-SHA384 www.google.com: ECDHE-RSA-AES128-GCM-SHA256 We wanted to make our webserver's HTTPS connection ...
1
vote
1answer
32 views

Are there GPG-signed OpenBSD ISOs with which I can verify an installation disc?

Are there GPG-signed OpenBSD ISOs that I can download and later verify the downloaded file? Or at least a GPG-signed shasum?
1
vote
1answer
56 views

Are there any PaxTest for OpenBSD?

Pax: PaX is a process memory protection patch For FreeBSD, there exists a testsuite called PaxTest, is there a PaxTest available for OpenBSD?
5
votes
3answers
628 views

Why does time/ident/daytime/comsat run after an OpenBSD 5.2 install?

I installed an OpenBSD 5.2 using "-* & +etc* & +base* & +bsd". After finished with the install, I rebooted, then netstat -at | grep LISTEN, this is what I get for output: Why does so ...
2
votes
0answers
199 views

How many rings does OpenBSD use?

Usually a Windows/Linux operating system uses afaik max 2 rings But how many rings does OpenBSD use?
4
votes
2answers
316 views

What does “Do you expect to run the X Windows System?” do when installing OpenBSD?

When installing OpenBSD 5.1, I got the question: Do you expect to run the X Windows System? What change does the installer make to my system if I say "yes"? I know what X Windows is, but I don't ...
2
votes
1answer
291 views

How to move the /var/www directory to a USB HDD?

I have a default OpenBSD 5.1 install. How Can I enabled httpd, OK. QUESTION: How can I use the /dev/sd0a on /mnt/usbhdd type ffs (local, nodev) instead of the default "/var/www" directory? What ...
7
votes
1answer
186 views

How to use /etc/fbtab in OpenBSD to secure X11?

OpenBSD's man page afterboot(8) suggests: "You might wish to tighten up security more by editing /etc/fbtab as when installing X." How might one do this? What lines when added to /etc/fbtab would ...
5
votes
1answer
170 views

OpenBSD and limiting login to local only like in FreeBSD's login.access(5)

I am using OpenBSD as my desktop. I don't want to login to my machine remotely, and I don't want anyone else to login remotely. In FreeBSD there is a file called login.access(5) that can be used to ...
3
votes
1answer
472 views

How to check downloaded package on OpenBSD 5.1?

Under linux there is a package called "ubuntu-keyring" - it's for checking that the downloaded packages (from the offical repositories) are the ones that are on the server. How can I do this under ...
3
votes
1answer
223 views

sandbox tcpdump under OpenBSD?

From FreeBSD 9.0 tcpdump is sandboxed with Capsicum. Are there any solutions for sandboxing tcpdump under OpenBSD? Just want to secure a running: tcpdump -w output.pcap because it can be only used ...
-1
votes
3answers
105 views

Does PGPDesktop supports OpenBSD or e.g. Fedora?

Does PGPDesktop support OpenBSD or e.g. Fedora, or can I only encrypt my whole hard drive when I use Windows?
2
votes
4answers
711 views

How to guarantee the integrity of an OS?

In information security, integrity means that data cannot be modified undetectably. This answer raised my interest, of course, I want to guarantee the integrity of my OS, outlined here. ...
13
votes
3answers
6k views

How should one set up full-disk encryption on OpenBSD?

Is there a preferred method to set up full-disk encryption under OpenBSD, similar to dm-crypt under Linux? I'm looking for full-disk encryption, as if someone were to steal my notebook they could ...