News for hackers. Stuff that matters.
Re:We're migrating many of our servers from Linux to FreeBSD by YATA0 on Monday January 24, 2022 @01:56PM (#30062196)
There are no DoD STIGs[0] for the BSDs, meaning they cannot run on military servers. Similarly, there are no CIS guides[1].

What would I know, only designed and implemented TS+ systems for a decade!

[0] https://public.cyber.mil/stigs/downloads/

[1] https://www.cisecurity.org/

Re:We're migrating many of our servers from Linux to FreeBSD by NexRebular on Monday January 24, 2022 @04:06PM (#30064035)
There are a lot of them for Windows... should I then trust that linux is as secure for government use as Microsoft systems are?
Re:We're migrating many of our servers from Linux to FreeBSD by trasz on Monday January 24, 2022 @05:04PM (#30064692)
It’s not about providing any real security, it’s about ticking checkboxes. So yes, if the checklist says “Linux and Windows are ok” then you can mark the checkbox, and with FreeBSD you couldn’t.
Re:We're migrating many of our servers from Linux to FreeBSD by YATA0 on Monday January 24, 2022 @04:58PM (#30064634)
Now you're shifting the goal posts after I provided sources that the US gov does not use BSD.

Microsoft Server systems for government use have been audited and have strict controls for implementation, hardening, securing, etc.

They're probably more secure than BSD.

Re:We're migrating many of our servers from Linux to FreeBSD by NexRebular on Monday January 24, 2022 @06:43PM (#30065781)
Yet I see BSD on the STIG list as well. Are there different levels of security for the list items or how does this work if Windows can be said to be more secure than BSD even if both are checkmarked on the audits?
Re:We're migrating many of our servers from Linux to FreeBSD by YATA0 on Monday January 24, 2022 @06:52PM (#30065882)
Since you keep editing your comment:

Not sure what you mean, but the custom Windows Server that the US government uses is likely more secure than BSD.

>Yet I see BSD on the STIG list as well.

No you don't. DISA does not provide STIGs for any of the BSDs. The US government does not use the BSDs for secure systems (TS+ etc.).

Re:We're migrating many of our servers from Linux to FreeBSD by NexRebular on Monday January 24, 2022 @07:25PM (#30066179)
Interesting... does that mean that all secure systems are running on Cisco networking?

As said, they do have STIGs and CIS documents for JunOS but I guess they don't run any Juniper in the US secure networking despite of having certifications.

Re:We're migrating many of our servers from Linux to FreeBSD by YATA0 on Monday January 24, 2022 @07:46PM (#30066360)
>Interesting... does that mean that all secure systems are running on Cisco networking?

Now you're strawmaning on top of shifting goal posts again.

>As said, they do have STIGs and CIS documents for JunOS

No they don't. The CIS documents specifically outline the operating systems they support, and there are ZERO BSDs listed (click on Operating Systems)[0].

Similarly, there are zero STIGs for Junos OS. There are STIGs and CIS benchmarks for Juniper network devices, but not for Junos OS. The actual devices could be running on FreeDOS for all we care, but FreeDOS in and of itself would not be allowed to run on any servers. Hilariously, even Juniper is moving away from BSD. Junos OS Evolved is Linux based.

You're fractally wrong.

[0] https://www.cisecurity.org/cis-benchmarks/