Hardened BSD ports

[FrenchFries]

Dear friends,

While strolling on Github, I found OPNsense port:
https://github.com/opnsense/ports

"OPNsense ports on top of HardenedBSD"

https://hardenedbsd.org/content/easy-feature-comparison

is it OPNsense build environmen?
Can I install ports in OPNsense?

kind regards,

[FrenchFries]

OK, from what I understand, HardenedBSD is the OS base of OPNSense:
http://hardenedbsd.org/content/projects

If OPNsense is configured with restrictions, it might not be possible to use HardenedBSD ports in OPNSense, as OPNSense mightl be "locked" or "restricted".

Switching to HardenedBSD immediately, it rocks!

[franco]

Hi,

Not sure what you are saying...

# opnsense-code tools ports
# cd /usr/ports/your/port
# make install

done.

HardenedBSD is where we pick features from, eventually we want to move "over", but in any case that is simply a modified version based on FreeBSD with extra security, like OPNsense.

In terms of security features, from least to most: FreeBSD < OPNsense < HardenedBSD


Cheers,
Franco