Lockdown is a hardening system written in C++ for FreeBSD
and released under the BSD license.
Lockdown was designed to harden FreeBSD's base system. It does so
by editing the systems configuration files and set permissions,
flags and ownership on SUID, GID and information files.
Lockdown was meant to be run only once, so you can quickly
and without forgetting something, get a secure system running.
WWW: http://lockdown.TruNet.dk/
PR: 62714
Submitted by: Daniel Blankensteiner <db@TruNet.dk>
While I am here,
- make portlint happy,
- use WRKSRC instead hardcode path.
- use SAMBASRC instead wrong path if WRKDIRPREFIX env set.
- remove PORTREVISION on new ports.
PR: ports/63464
Submitted by: Jean Milanez Melo <jmelo@freebsdbrasil.com.br>
signature definitions). This allows the definitions to be updated
seperately as and when required.
PR: ports/62917, 62918
Submitted by: Tim Bishop <tim@bishnet.net> (maintainer)
These protocols are all used to run a remote session on a computer,
over a network. PuTTY implements the client end of that session:
the end at which the session is displayed, rather than the end
at which it runs.
WWW: http://www.chiark.greenend.org.uk/~sgtatham/putty/
Version 1.1.91 is incompatible with 1.1.12.
The -devel is required by the upcoming GnuTLS version and the new vpnc version.
The Stable version is still required by the Aegypten plugins.
Approved by: portmgr(marcus)
Repocopied by: joe
This is a package to test FreeBSD port auditing systems, e.g. portaudit
and the upcoming VuXML based system. Even though it installs no files,
it is listed in the portaudit database as vulnerable.
Kind of a EICAR-STANDARD-ANTIVIRUS-TEST-FILE
- The reference source for the CVM interface
- Diagnostic and benchmark CVM clients
- A checkpassword interface CVM client
- A UNIX/POSIX system module (uses getpwnam)
- A flat-file module
- A library for client writers
- A set of libraries for module writers
Author: Bruce Guenter <bruceg@em.ca>
WWW: http://untroubled.org/cvm/
This port in needed to unbreak build of mail/mailfront and ftp/twoftpd.
VPNC - Client for Cisco 3000 VPN Concentrator
A VPN client compatible with Cisco's EasyVPN equipment.
Supports IPSec (ESP) with Mode Configuration and Xauth.
Supports only shared-secret IPSec authentication, 3DES, MD5,
and IP tunneling. It runs entirely in userspace
PR: 60283
Submitted by: Christian Lackas
Graphical certification authority is an interface for managing
RSA keys and certificates, and the creation and signing of PKCS#10 requests.
It uses the OpenSSL library and a Berkeley DB for key and certificate storage.
It supports importing and exporting keys and PEM DER PKCS8 certificates,
signing and revoking of PEM DER PKCS12, and selection of x509v3 extensions.
A tree view of certificates is presented.
Author: Christian Hohnstaedt <christian@hohnstaedt.de>
WWW: http://www.hohnstaedt.de/xca.html
PR: 58378
Submitted by: Valentin Zahariev <curly@e-card.bg>
While pam(8) refers Linux-PAM Guides at ``SEE ALSO'' section,
it seems no documentation is in ports/ tree.
I think reading those docs takes good understanding of PAM
in RELENG_4, and also OpenPAM in HEAD.
PR: ports/53490
Submitted by: Hideyuki KURASHINA <rushani@FreeBSD.org>
A small SSH Askpass replacement written with GTK2. Features
fullscreen dialog and translucent background.
PR: ports/56537
Submitted by: Manuel Rabade <mig@mig-29.net>
security/opensc port that works with Estonian Electronic ID card
This is modified version of the OpenSC port that works with
Estonian Electronic ID card (EstEID).
WWW: http://marie.vtl.ee/esteid/
PR: ports/56612
Submitted by: Sven Petai <hadara@bsd.ee>
autossh is a program to start a copy of ssh and monitor it, restarting
it as necessary should it die or stop passing traffic.
The original idea and the mechanism were from rstunnel (Reliable SSH
Tunnel). With this version the method changes: autossh uses ssh to
construct a loop of ssh forwardings (one from local to remote, one
from remote to local), and then sends test data that it expects to
get back. (The idea is thanks to Terrence Martin.)
WWW: http://www.harding.motd.ca/autossh/
