aboutsummaryrefslogtreecommitdiff
path: root/documentation/content/en/books/handbook/security
Commit message (Collapse)AuthorAgeFilesLines
* documentation: Adjust path variables for Hugo 0.123.X upgradeDanilo G. Baio2024-03-231-1/+1
| | | | | | | | These adjustments ensure menu and navigation will work fine with the recent changes. Reviewed by: fernape Differential Revision: https://reviews.freebsd.org/D44284
* handbook/security: Fix typo and reword a sentenceRoller Angel2024-02-241-2/+2
| | | | | | | executint -> executing Reviewed by: Mina Galić <freebsd@igalic.co> Pull Request: https://github.com/freebsd/freebsd-doc/pull/331
* handbook/security: Fix grammarZePotente2024-02-241-1/+1
| | | | | | | not exists -> does not exist Reviewed by: Pau Amma <pauamma@gundo.com>, dbaio Pull Request: https://github.com/freebsd/freebsd-doc/pull/325
* [hb][security]: Remove unnecessary promgramlistingMinsoo Choo2024-01-261-5/+0
| | | | | | The program listing does not add any value. Differential Revision: https://reviews.freebsd.org/D43548
* doc: Update source files (en .po), for translationsDanilo G. Baio2024-01-171-2861/+2432
|
* Typo fix: simpliest -> simplestBenedict Reuschling2023-12-281-1/+1
|
* Fix repeated typo: ouput -> outputBenedict Reuschling2023-12-281-3/+3
|
* Remove more instances of "more complete" and replace with "complete"Benedict Reuschling2023-12-281-1/+1
|
* Handbook - Security: document OpenSSL's FIPS providerPierre Pronchery2023-10-081-0/+101
| | | | Pull Request: https://github.com/freebsd/freebsd-doc/pull/264
* Handbook - Security: Upgrade the chapterSergio Carlavilla Delgado2023-09-271-1450/+1121
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade Security chapter as part of the Handbook Working Group. This is a first approximation, there are things to improve and add to the chapter, but we can continue from here :) Changes: - Move VPN over IPSec to an article, in the future we will add too OpenVPN (DCO) and WireGuard to the article - Rework Securing Accounts section - Upgrade Password Hashes algorithms - Improve sudo/doas section - Add new Intrusion Detection System (IDS) section - Add new Secure levels section - Add new File flags section - Rework OpenSSH and OpenSSL sections - Rework Access Control Lists and add NFSv4 ACLs - Add Capsicum introduction section - Upgrade Resource Limits section - Improve Asciidoc syntax Documentation checked: - https://man.freebsd.org/security - https://calomel.org/ids_mtree.html - https://calomel.org/openssh.html - https://calomel.org/openssh_distributed.html - https://man.freebsd.org/cgi/man.cgi?query=chflags&sektion=1&apropos=0&manpath=FreeBSD+13.2-RELEASE+and+Ports - https://www.cyberciti.biz/tips/howto-write-protect-file-with-immutable-bit.html - https://wiki.gentoo.org/wiki/Doas - https://people.freebsd.org/~dannyboy/articles/freebsd_acls.pdf - https://wiki.freebsd.org/NFSv4_ACLs - https://man.freebsd.org/cgi/man.cgi?setfacl Reviewed by: emaste, karels, philip (first draft) Differential Revision: https://reviews.freebsd.org/D41620 Sponsored by: Daifressh
* doc: Update source files (en .po), for translationsDanilo G. Baio2023-07-151-870/+504
|
* Remove OPIE documentationEd Maste2023-07-141-194/+0
| | | | | | | OPIE was retired in src 0aa2700123e2 Approved by: des@ Differential Revision: https://reviews.freebsd.org/D36854
* Handbook WG - Create a new network chapterSergio Carlavilla Delgado2023-07-061-6/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | Create a new chaper with the basic configuration of a wired and wireless networks in FreeBSD. Sections of the new chapter: - Synopsis - Setting up the Network - Wired Networks - Wireless Networks - Hostname - DNS - Troubleshooting Changes: - Move wired network section from config to network - Move virtual hosts section from config to advanced networking - Move basic wireless section from advanced networking to network - Move IPv6 from advanced networking to network - Upgrade all command outputs - Use sysrc - Improve AsciiDoc syntax Differential Revision: https://reviews.freebsd.org/D40546 Reviewed by: bcr, dbaio, fernape, karels Sponsored by: Daifressh
* doc: Update source files (en .po), for translationsDanilo G. Baio2023-06-201-4/+4
|
* handbook: use userid example other than `toor`Ed Maste2023-06-151-3/+3
| | | | | | | | | | The example `pw lock` invocation does not need to reference a superuser account, so just use a hypothetical user's userid. I chose an arbitrary name from Wikipedia's Unisex_name page. Reviewed by: debdrup Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D40566
* doc: Update source files (en .po), for translationsDanilo G. Baio2023-04-201-660/+649
|
* Security Handbook Chapter - Stop using -2 argument in ssh(1)Tom Hukins2023-03-051-7/+4
| | | | Pull Request: https://github.com/freebsd/freebsd-doc/pull/118
* Remove useless Hugo alias in HandbookSergio Carlavilla Delgado2023-03-041-1/+0
|
* doc: Update source files (en .po), for translationsDanilo G. Baio2023-01-211-560/+576
|
* handbook: correct my own grammarCeri Davies2023-01-071-2/+2
|
* handbook: update for OPIE removalCeri Davies2023-01-071-1/+10
|
* handbook/security: minor grammatical nitCeri Davies2023-01-011-1/+1
| | | | | PR: 264892 Reported by: kodcode@gmx.com
* Escape correctly the # character and fix some typosLuís Henriques2022-11-021-1/+1
| | | | PR: 267002
* Move wayland section to its own chapterSergio Carlavilla Delgado2022-11-021-3/+3
| | | | | | | | No changes, only move the content from X11 to a new chapter Patch by: trhodes@, with some minor changes from carlavilla@ Differential Revision: https://reviews.freebsd.org/D35099
* handbook: Update source files (en .po), for translationsDanilo G. Baio2022-10-011-645/+645
|
* handbook: Adjust YAML/aliases in the Front MatterDanilo G. Baio2022-10-011-15/+1
| | | | | | | | | | | | The aliases tags are valid YAML, but the po4a tool is not prepared to identify them. This change works around the issue until we have a proper fix on po4a. These aliases tags were introduced recently to improve SEO in the Handbook. Discussed with: carlavilla
* Add hugo aliases to improve SEO in the HandbookSergio Carlavilla Delgado2022-09-021-0/+15
|
* doc: Add source .po files for translationsDanilo G. Baio2022-08-071-0/+5359
| | | | | | | | | | | | | | | | | | This helps the Weblate translation workflow and offline translations through .po files, it's important to update these files constantly. The goal here is to have a semi-automated translation workflow; Weblate will pull updates automatically from the main repository and commit translations to another repository. Doc committers are encouraged to update the source .po files whenever there are updates in the English documentation part. $ ./tools/update_translate_template.sh documentation Anyway, I'll keep doing this periodically. Discussed with: doceng
* Fix several small typos and improve wording in HandbookAndreas Bjørnestad2022-05-211-7/+7
| | | | PR: 254153
* handbook: Use a man macro for manual pagesMateusz Piotrowski2022-03-291-1/+1
|
* handbook/security: Clarify information in IPSec setupAri Maniatis2022-02-061-29/+38
| | | | | Reviewed by: dbaio Pull Request: https://github.com/freebsd/freebsd-doc/pull/55
* Spell 'availability' correctly.Benedict Reuschling2022-01-291-7/+7
|
* Update supported SSL/TLS versions in the base system.Sergey Kandaurov2022-01-111-2/+1
|
* New Documentation PortalSergio Carlavilla Delgado2021-12-111-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | I'm very pleased to announce the release of our new Documentation Portal. Key features: * Responsive * Modern design * Theme support: Light, Dark, High contrast * Removed Python dependency Acknowledgment: * Alexander Leidinger <netchild (at) FreeBSD.org> * Baptiste Daroussin <bapt (at) FreeBSD.org> * Benedict Reuschling <bcr (at) freebsd.org> * Daniel Ebdrup Jensen <debdrup (at) FreeBSD.org> * Danilo G. Baio <dbaio (at) FreeBSD.org> * Dave Cottlehuber <dch (at) FreeBSD.org> * Ed Maste <emaste (at) FreeBSD.org> * Fernando Apesteguía <fernape (at) FreeBSD.org> * Pedro Giffuni <pfg (at) FreeBSD.org> * Joseph Mingrone <jrm (at) ftfl.ca> * Rocky Hotas <rockyhotas (at) firemail.cc> * Pau Amma <pauamma (at) gundo.com> * The FreeBSD Foundation Approved by: core, doceng
* Build offline documentation using Hugo and other improvementsSergio Carlavilla Delgado2021-11-031-19/+21
| | | | | | | | | | | | | | | | | | | | | | * Allow to build the documentation offline using Hugo * Fix link problems * Remove SVN entities * Fix lang problems to help weblate * Move all the AsciiDoctor translations to the shared folder to help weblate * Allow the possibility to build each document. For example each document can be edited in and watched the result in real time in VS Code or Vim/NeoVim. Breaking changes: Eliminate the possibility of building books or articles. They must be builded at the same time. This functionality will be restored when version 0.89.0 is in the repositories in a couple of weeks. Reviewed by: dbaio@ Differential Revision: https://reviews.freebsd.org/D31926
* handbook: OpenSSH no longer supports protocol v1Ed Maste2021-07-061-5/+2
| | | | | | | | | | | Base system commit 4f52dfbb8d6c (May 2018) introduced OpenSSH 7.6p1, which dropped support for the SSH v1 protocol. The v2 protocol has existed for a very long time and is ubiquitous so there is no need to mention protocol compatibility at all here. Reviewed by: ygy Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D31079
* Revert "Add Hugo's lang shortcode"Danilo G. Baio2021-06-191-3/+3
| | | | | | | This reverts commit 3462d12db6ebf303064db168a2333374344f369a. Too soon, it broke asciidoctor-pdf which doesn't know Hugo's shortcode. It will take more time and care.
* Add Hugo's lang shortcodeDanilo G. Baio2021-06-191-3/+3
| | | | | | | | | | | | | | | | | | This is a prerequisite for the translation workflow through .po files and Weblate. The asciidoctor include with the shortcode variable will help because won't be needed to change the includes manually after converting the translation (.po file) back to .adoc. It will help other areas like, language attributes, which today is fixed in every document. The use of shortcode was suggested by jmooring@ from Hugo's project on Github. Reviewed by: carlavilla Differential Revision: https://reviews.freebsd.org/D30823
* Use One Sentence Per Line in the HandbookSergio Carlavilla Delgado2021-06-061-222/+661
|
* Improve SEO with the keywors meta tagSergio Carlavilla Delgado2021-05-041-0/+1
| | | | | | Add in all articles and books the tag list. Modify the theme to use the tag list defined in articles and books to generate the keywords meta tag
* Improve the SEO of the documentation portalSergio Carlavilla Delgado2021-05-011-0/+1
| | | | | | | Changes: - Add the description meta tag in the index, articles and books - Add a brief description in each article and book. - Remove the SVN expansion tag
* Use correct syntax markup for shellLi-Wen Hsu2021-03-141-72/+72
| | | | Approved by: carlavilla
* Handbook: Security -> DoasGordon Bergling2021-03-061-0/+2
| | | | Add an actual headline for the small chapter.
* Handbook: Add a small chapter about doas as an alternative to sudoGordon Bergling2021-03-061-0/+23
| | | | | | | | doas is a viable alternative to sudo, so it is worth to be mentioned in our handbook. Reviewed by: 0mp (early version) Differential Revision: https://reviews.freebsd.org/D28483
* Multiple files: Fix 'shared' referencesCeri Davies2021-02-221-1/+1
| | | | | | | | The hier(7) man-page lists /usr/share as the location for architecture-independent files, so fix a few instances where the documentation referes to /usr/shared instead of /usr/share. PR: 253760
* Migrate doc to Hugo/AsciiDoctorSergio Carlavilla Delgado2021-01-251-0/+2127
I'm very pleased to announce the release of our new website and documentation using the new toolchain with Hugo and AsciiDoctor. To get more information about the new toolchain please read the FreeBSD Documentation Project Primer[1], Hugo docs[2] and AsciiDoctor docs[3]. Acknowledgment: Benedict Reuschling <bcr@> Glen Barber <gjb@> Hiroki Sato <hrs@> Li-Wen Hsu <lwhsu@> Sean Chittenden <seanc@> The FreeBSD Foundation [1] https://docs.FreeBSD.org/en/books/fdp-primer/ [2] https://gohugo.io/documentation/ [3] https://docs.asciidoctor.org/home/ Approved by: doceng, core