OPNsense Forum

Archive => 17.7 Legacy Series => Topic started by: FrenchFries on August 16, 2017, 12:02:06 am

Title: Hardened BSD ports
Post by: FrenchFries on August 16, 2017, 12:02:06 am

Dear friends,

While strolling on Github, I found OPNsense port:
https://github.com/opnsense/ports

"OPNsense ports on top of HardenedBSD"

https://hardenedbsd.org/content/easy-feature-comparison

is it OPNsense build environmen?
Can I install ports in OPNsense?

kind regards,

Title: Re: Hardened BSD ports
Post by: FrenchFries on August 16, 2017, 12:28:53 am

OK, from what I understand, HardenedBSD is the OS base of OPNSense:
http://hardenedbsd.org/content/projects

If OPNsense is configured with restrictions, it might not be possible to use HardenedBSD ports in OPNSense, as OPNSense mightl be "locked" or "restricted".

Switching to HardenedBSD immediately, it rocks!

Title: Re: Hardened BSD ports
Post by: franco on August 16, 2017, 06:26:19 am

Hi,

Not sure what you are saying...

# opnsense-code tools ports
# cd /usr/ports/your/port
# make install

done. :)

HardenedBSD is where we pick features from, eventually we want to move "over", but in any case that is simply a modified version based on FreeBSD with extra security, like OPNsense.

In terms of security features, from least to most: FreeBSD < OPNsense < HardenedBSD


Cheers,
Franco