Foreword |
|
xxvii | |
|
Acknowledgments |
|
xxxi | |
Introduction |
|
xxxiii | |
What Is FreeBSD? |
|
xxxiv | |
|
BSD: FreeBSD's Granddaddy |
|
|
xxxiv | |
|
|
xxxv | |
|
The AT&T/CSRG/BSDi Iron Cage Match |
|
|
xxxv | |
|
|
xxxvi | |
FreeBSD Development |
|
xxxvii | |
|
|
xxxvii | |
|
|
xxxviii | |
|
|
xxxix | |
Other BSDs |
|
xxxix | |
|
|
xxxix | |
|
|
xxxix | |
|
|
xxxix | |
|
|
xl | |
|
|
xl | |
Other Unixes |
|
xl | |
|
|
xl | |
|
|
xli | |
|
|
xli | |
|
|
xli | |
|
|
xli | |
FreeBSD's Strengths |
|
xlii | |
|
|
xlii | |
|
|
xliii | |
|
Simplified Software Management |
|
|
xliii | |
|
|
xliii | |
|
|
xliii | |
Who Should Use FreeBSD? |
|
xliii | |
Who Should Run Another BSD? |
|
xliv | |
Who Should Run a Proprietary Operating System? |
|
xliv | |
How to Read This Book |
|
xliv | |
What Must You Know? |
|
xlv | |
For the New System Administrator |
|
xlv | |
|
|
xlvi | |
|
|
xlvi | |
Notes on the Third Edition |
|
xlviii | |
1 Getting More Help |
|
1 | (14) |
|
|
2 | (1) |
|
|
2 | (1) |
|
|
2 | (1) |
|
|
3 | (4) |
|
|
4 | (1) |
|
|
5 | (1) |
|
|
5 | (1) |
|
|
6 | (1) |
|
|
6 | (1) |
|
|
7 | (1) |
|
|
7 | (1) |
|
The Mailing List Archives |
|
|
8 | (1) |
|
|
8 | (1) |
|
|
8 | (1) |
|
Using FreeBSD Problem-Solving Resources |
|
|
9 | (2) |
|
Checking the Handbook and FAQ |
|
|
9 | (1) |
|
|
9 | (2) |
|
Mailing Lists Archives and Forums |
|
|
11 | (1) |
|
|
11 | (1) |
|
|
11 | (4) |
|
|
12 | (2) |
|
|
14 | (1) |
|
|
14 | (1) |
2 Before You Install |
|
15 | (14) |
|
|
16 | (1) |
|
|
17 | (1) |
|
|
17 | (3) |
|
|
19 | (1) |
|
|
20 | (1) |
|
|
20 | (1) |
|
|
20 | (5) |
|
|
21 | (1) |
|
|
22 | (1) |
|
Disk Partitioning Methods |
|
|
23 | (1) |
|
|
23 | (1) |
|
Multiple Operating Systems |
|
|
24 | (1) |
|
|
24 | (1) |
|
|
24 | (1) |
|
|
25 | (2) |
|
|
26 | (1) |
|
Choosing Installation Images |
|
|
26 | (1) |
|
|
27 | (2) |
3 Installing |
|
29 | (20) |
|
|
30 | (2) |
|
|
32 | (2) |
|
|
34 | (7) |
|
|
34 | (5) |
|
|
39 | (2) |
|
Network and Service Configuration |
|
|
41 | (5) |
|
|
46 | (3) |
4 Start Me Up! The Boot Process |
|
49 | (34) |
|
|
50 | (1) |
|
Unified Extensible Firmware Interface |
|
|
50 | (1) |
|
Basic Input/Output System |
|
|
50 | (1) |
|
|
51 | (1) |
|
|
51 | (1) |
|
Boot FreeBSD in Single-User Mode |
|
|
51 | (1) |
|
|
52 | (1) |
|
|
52 | (1) |
|
|
52 | (3) |
|
Disks in Single-User Mode |
|
|
52 | (1) |
|
Programs Available in Single-User Mode |
|
|
53 | (1) |
|
The Network in Single-User Mode |
|
|
54 | (1) |
|
Uses for Single-User Mode |
|
|
54 | (1) |
|
|
55 | (2) |
|
|
55 | (1) |
|
|
56 | (1) |
|
|
56 | (1) |
|
|
57 | (1) |
|
|
57 | (1) |
|
|
58 | (1) |
|
|
59 | (3) |
|
|
62 | (9) |
|
/etc/rc.conf,/etc/rc.conf.d, and /etc/defaults/rc.conf |
|
|
63 | (8) |
|
|
71 | (3) |
|
|
71 | (2) |
|
|
73 | (1) |
|
|
74 | (9) |
|
|
74 | (1) |
|
Physical Serial Console Setup |
|
|
75 | (1) |
|
IPMI Serial Console Setup |
|
|
76 | (1) |
|
Configuring FreeBSD's Serial Console |
|
|
77 | (2) |
|
|
79 | (2) |
|
|
81 | (2) |
5 Read This Before You Break Something Else! (Backup And Recovery) |
|
83 | (12) |
|
|
84 | (1) |
|
|
84 | (3) |
|
Tape Drive Device Nodes, Rewinding, and Ejecting |
|
|
84 | (1) |
|
|
85 | (1) |
|
|
86 | (1) |
|
Other Tape Drive Commands |
|
|
87 | (1) |
|
|
87 | (5) |
|
|
88 | (2) |
|
|
90 | (1) |
|
|
91 | (1) |
|
|
91 | (1) |
|
|
92 | (1) |
|
|
92 | (1) |
|
Repairing a Broken System |
|
|
92 | (3) |
6 Kernel Games |
|
95 | (28) |
|
|
96 | (1) |
|
|
97 | (4) |
|
|
98 | (1) |
|
sysctl Values and Definitions |
|
|
99 | (1) |
|
|
100 | (1) |
|
|
100 | (1) |
|
Setting sysctls Automatically |
|
|
101 | (1) |
|
|
101 | (2) |
|
Viewing the Kernel Environment |
|
|
101 | (1) |
|
Dropping Hints to Device Drivers |
|
|
102 | (1) |
|
|
103 | (2) |
|
|
103 | (1) |
|
Loading and Unloading Modules |
|
|
104 | (1) |
|
|
105 | (1) |
|
|
105 | (5) |
|
|
106 | (1) |
|
|
106 | (1) |
|
Back Up Your Working Kernel |
|
|
107 | (1) |
|
Configuration File Format |
|
|
107 | (2) |
|
|
109 | (1) |
|
|
110 | (2) |
|
Booting an Alternate Kernel |
|
|
111 | (1) |
|
Custom Kernel Configuration |
|
|
112 | (7) |
|
|
112 | (6) |
|
Troubleshooting Kernel Builds |
|
|
118 | (1) |
|
Inclusions, Exclusions, and Expanding the Kernel |
|
|
119 | (4) |
|
|
119 | (1) |
|
Inclusions and Exclusions |
|
|
120 | (1) |
|
|
121 | (2) |
7 The Network |
|
123 | (20) |
|
|
124 | (3) |
|
|
124 | (1) |
|
Datalink: The Physical Protocol |
|
|
125 | (1) |
|
|
125 | (1) |
|
Heavy Lifting: The Transport Layer |
|
|
126 | (1) |
|
|
126 | (1) |
|
|
127 | (1) |
|
|
128 | (2) |
|
|
130 | (1) |
|
IPv4 Addresses and Netmasks |
|
|
131 | (2) |
|
Computing Netmasks in Decimal |
|
|
132 | (1) |
|
|
133 | (1) |
|
|
133 | (1) |
|
IPv6 Addresses and Subnets |
|
|
133 | (3) |
|
|
134 | (1) |
|
Understanding IPv6 Addresses |
|
|
134 | (1) |
|
|
135 | (1) |
|
|
135 | (1) |
|
|
136 | (1) |
|
|
136 | (4) |
|
|
136 | (1) |
|
|
137 | (1) |
|
|
137 | (1) |
|
How Protocols Fit Together |
|
|
138 | (1) |
|
|
138 | (2) |
|
|
140 | (3) |
|
|
140 | (1) |
|
|
141 | (2) |
8 Configuring Networking |
|
143 | (24) |
|
|
144 | (6) |
|
Configuring Changes with ifconfig(8) |
|
|
144 | (1) |
|
Adding an IP to an Interface |
|
|
145 | (1) |
|
|
146 | (1) |
|
|
146 | (1) |
|
Multiple IP Addresses on One Interface |
|
|
147 | (1) |
|
|
148 | (1) |
|
|
149 | (1) |
|
|
149 | (1) |
|
|
150 | (4) |
|
Host/IP Information Sources |
|
|
151 | (1) |
|
Local Names with /etc/hosts |
|
|
151 | (1) |
|
|
152 | (1) |
|
|
153 | (1) |
|
|
154 | (4) |
|
|
154 | (1) |
|
What's Listening on Which Port? |
|
|
155 | (1) |
|
|
156 | (1) |
|
Network Capacity in the Kernel |
|
|
157 | (1) |
|
Optimizing Network Performance |
|
|
158 | (4) |
|
Optimizing Network Hardware |
|
|
159 | (1) |
|
|
159 | (2) |
|
Maximum Incoming Connections |
|
|
161 | (1) |
|
|
161 | (1) |
|
|
162 | (1) |
|
|
162 | (2) |
|
|
163 | (1) |
|
|
164 | (1) |
|
|
164 | (3) |
|
|
164 | (1) |
|
Configuring VLANs at Boot |
|
|
165 | (2) |
9 Securing Your System |
|
167 | (34) |
|
|
168 | (2) |
|
|
168 | (1) |
|
|
169 | (1) |
|
|
169 | (1) |
|
Motivated Skilled Attackers |
|
|
169 | (1) |
|
FreeBSD Security Announcements |
|
|
170 | (1) |
|
|
171 | (7) |
|
|
171 | (1) |
|
Configuring Adduser: /etc/adduser.conf |
|
|
172 | (1) |
|
|
173 | (5) |
|
|
178 | (1) |
|
root, Groups, and Management |
|
|
179 | (6) |
|
|
179 | (1) |
|
|
180 | (2) |
|
Using Groups to Avoid Root |
|
|
182 | (3) |
|
|
185 | (7) |
|
Restricting Login Ability |
|
|
185 | (3) |
|
|
188 | (4) |
|
|
192 | (3) |
|
Setting and Viewing File Flags |
|
|
194 | (1) |
|
|
195 | (3) |
|
|
195 | (2) |
|
Which Securelevel Do You Need? |
|
|
197 | (1) |
|
What Won't Securelevels and File Flags Accomplish2 |
|
|
197 | (1) |
|
|
198 | (1) |
|
|
198 | (1) |
|
|
199 | (2) |
10 Disks, Partitioning, And GEOM |
|
201 | (30) |
|
|
201 | (1) |
|
|
202 | (1) |
|
|
203 | (1) |
|
|
204 | (1) |
|
|
204 | (1) |
|
The GEOM Storage Architecture |
|
|
204 | (4) |
|
|
205 | (1) |
|
|
206 | (1) |
|
Providers, Consumers, and Slicers |
|
|
206 | (1) |
|
|
207 | (1) |
|
GEOM Device Nodes and Stacks |
|
|
208 | (1) |
|
Hard Disks, Partitions, and Schemes |
|
|
208 | (1) |
|
The Filesystem Table: /etc/fstab |
|
|
209 | (1) |
|
|
210 | (1) |
|
|
211 | (3) |
|
|
212 | (1) |
|
|
212 | (2) |
|
|
214 | (1) |
|
|
214 | (3) |
|
|
215 | (1) |
|
|
216 | (1) |
|
|
216 | (1) |
|
|
217 | (1) |
|
Removing the Disk Partitioning Scheme |
|
|
217 | (1) |
|
Assigning the Partitioning Scheme |
|
|
217 | (1) |
|
The GPT Partitioning Scheme |
|
|
218 | (5) |
|
|
218 | (1) |
|
|
219 | (1) |
|
|
219 | (2) |
|
|
221 | (1) |
|
Changing Labels and Types |
|
|
221 | (1) |
|
Booting on Legacy Hardware |
|
|
222 | (1) |
|
Unified Extensible Firmware Interface and GPT |
|
|
222 | (1) |
|
|
223 | (1) |
|
The MBR Partitioning Scheme |
|
|
223 | (4) |
|
What Is the Master Boot Record? |
|
|
223 | (1) |
|
|
224 | (1) |
|
|
224 | (1) |
|
MBR and Disklabel Alignment |
|
|
225 | (1) |
|
|
225 | (1) |
|
|
226 | (1) |
|
|
226 | (1) |
|
|
227 | (4) |
|
|
227 | (1) |
|
Creating BSD Label Partitions |
|
|
227 | (1) |
|
Assigning Specific Partition Letters |
|
|
228 | (3) |
11 The Unix File System |
|
231 | (26) |
|
|
232 | (1) |
|
|
232 | (1) |
|
|
232 | (1) |
|
|
233 | (1) |
|
Mounting and Unmounting Filesystems |
|
|
233 | (4) |
|
Mounting Standard Filesystems |
|
|
233 | (1) |
|
|
234 | (1) |
|
|
234 | (1) |
|
|
234 | (3) |
|
|
237 | (2) |
|
|
237 | (1) |
|
|
238 | (1) |
|
|
238 | (1) |
|
Creating and Tuning UFS Filesystems |
|
|
239 | (4) |
|
|
239 | (1) |
|
|
239 | (1) |
|
|
240 | (1) |
|
|
241 | (2) |
|
Expanding UFS Filesystems |
|
|
243 | (1) |
|
|
243 | (2) |
|
Taking and Destroying Snapshots |
|
|
244 | (1) |
|
|
244 | (1) |
|
|
244 | (1) |
|
|
245 | (4) |
|
System Shutdown: The Syncer |
|
|
245 | (1) |
|
|
245 | (1) |
|
File System Checking: fsck(8) |
|
|
246 | (2) |
|
Forcing Read-Write Mounts on Dirty Disks |
|
|
248 | (1) |
|
Background fsck, fsck-y, Foreground fsck, Oy Vey! |
|
|
248 | (1) |
|
|
249 | (1) |
|
|
250 | (2) |
|
|
252 | (5) |
|
|
252 | (1) |
|
|
253 | (1) |
|
Installing Existing Files onto New Disks |
|
|
253 | (1) |
|
|
254 | (3) |
12 The Z File System |
|
257 | (24) |
|
|
258 | (5) |
|
|
260 | (1) |
|
|
261 | (2) |
|
|
263 | (2) |
|
|
264 | (1) |
|
|
264 | (1) |
|
|
264 | (1) |
|
|
265 | (2) |
|
VDEV Types and Redundancy |
|
|
265 | (2) |
|
|
267 | (3) |
|
|
267 | (1) |
|
Creating and Viewing Pools |
|
|
268 | (1) |
|
|
269 | (1) |
|
|
270 | (1) |
|
|
270 | (1) |
|
|
270 | (1) |
|
|
271 | (2) |
|
|
271 | (1) |
|
|
272 | (1) |
|
|
273 | (1) |
|
|
273 | (1) |
|
Pool Integrity and Repair |
|
|
273 | (3) |
|
|
274 | (1) |
|
|
274 | (1) |
|
|
274 | (2) |
|
|
276 | (5) |
|
Viewing Boot Environments |
|
|
277 | (1) |
|
Creating and Accessing Boot Environments |
|
|
277 | (1) |
|
Activating Boot Environments |
|
|
278 | (1) |
|
Removing Boot Environments |
|
|
279 | (1) |
|
Boot Environments at Boot |
|
|
279 | (1) |
|
Boot Environments and Applications |
|
|
279 | (2) |
13 Foreign Filesystems |
|
281 | (36) |
|
|
282 | (2) |
|
Supported Foreign Filesystems |
|
|
282 | (1) |
|
Permissions and Foreign Filesystems |
|
|
283 | (1) |
|
|
284 | (4) |
|
|
285 | (1) |
|
Removable Media and /etc/fstab |
|
|
285 | (1) |
|
|
286 | (1) |
|
|
286 | (2) |
|
Writing Images to Thumb Drives |
|
|
288 | (1) |
|
|
288 | (7) |
|
|
289 | (1) |
|
|
290 | (2) |
|
|
292 | (1) |
|
|
293 | (2) |
|
|
295 | (5) |
|
|
295 | (2) |
|
|
297 | (2) |
|
Dynamic Device Management with devd(8) |
|
|
299 | (1) |
|
Miscellaneous Filesystems |
|
|
300 | (1) |
|
|
301 | (9) |
|
|
302 | (1) |
|
Configuring the NFS Server |
|
|
302 | (2) |
|
|
304 | (4) |
|
|
308 | (2) |
|
The Common Internet File System |
|
|
310 | (5) |
|
|
310 | (1) |
|
|
311 | (1) |
|
|
311 | (1) |
|
|
311 | (2) |
|
|
313 | (1) |
|
Other smbutil(1) Functions |
|
|
313 | (1) |
|
|
313 | (1) |
|
Other mount_smbfs Options |
|
|
314 | (1) |
|
|
314 | (1) |
|
|
315 | (1) |
|
|
315 | (2) |
14 Exploring/Etc |
|
317 | (18) |
|
|
318 | (1) |
|
|
318 | (1) |
|
|
318 | (1) |
|
|
318 | (1) |
|
|
318 | (1) |
|
|
319 | (1) |
|
/etc/bluetooth, /etc/bluetooth.device.conf, and /etc/defaults/bluetooth.device.conf |
|
|
319 | (1) |
|
|
319 | (1) |
|
/etc/crontab and /etc/cron.d |
|
|
319 | (1) |
|
|
319 | (1) |
|
|
319 | (1) |
|
|
320 | (1) |
|
/etc/devfs.conf, /etc/devfs.rules, and /etc/defaults/devfs.rules |
|
|
320 | (1) |
|
|
320 | (1) |
|
|
320 | (1) |
|
|
/321 | |
|
|
321 | (1) |
|
|
321 | (1) |
|
|
321 | (1) |
|
|
321 | (1) |
|
|
321 | (1) |
|
|
321 | (1) |
|
|
321 | (1) |
|
|
321 | (1) |
|
|
322 | (1) |
|
|
322 | (1) |
|
|
322 | (1) |
|
|
322 | (1) |
|
|
323 | (1) |
|
|
323 | (1) |
|
|
324 | (1) |
|
|
324 | (1) |
|
|
324 | (1) |
|
|
324 | (1) |
|
|
324 | (1) |
|
|
325 | (1) |
|
|
325 | (1) |
|
|
325 | (1) |
|
|
325 | (1) |
|
|
325 | (1) |
|
|
325 | (1) |
|
|
326 | (1) |
|
|
326 | (1) |
|
|
326 | (1) |
|
|
326 | (1) |
|
|
326 | (1) |
|
|
326 | (1) |
|
|
326 | (1) |
|
|
326 | (1) |
|
|
327 | (1) |
|
|
327 | (1) |
|
|
327 | (1) |
|
/etc/periodic.conf and /etc/defaults/periodic.conf |
|
|
327 | (1) |
|
|
327 | (1) |
|
|
328 | (1) |
|
|
328 | (1) |
|
daily_show_badconfig="NO" |
|
|
328 | (1) |
|
daily_local="/etc/daily.local" |
|
|
328 | (1) |
|
|
328 | (1) |
|
|
328 | (1) |
|
|
329 | (1) |
|
|
/329 | |
|
|
329 | (1) |
|
|
329 | (1) |
|
|
329 | (1) |
|
|
329 | (1) |
|
|
329 | (1) |
|
|
330 | (1) |
|
|
330 | (1) |
|
|
330 | (1) |
|
|
330 | (1) |
|
|
/330 | |
|
|
331 | (1) |
|
|
331 | (1) |
|
|
/331 | |
|
|
331 | (1) |
|
|
331 | (1) |
|
|
331 | (1) |
|
|
/331 | |
|
|
/331 | |
|
|
332 | (1) |
|
/etc/syslog.conf, /etc/syslog.conf.d/ |
|
|
/332 | |
|
/etc/termcap, /etc/termcap.small |
|
|
332 | (1) |
|
|
332 | (1) |
|
|
/332 | |
|
|
332 | (3) |
|
|
/333 | |
15 Making Your System Useful |
|
335 | (26) |
|
|
336 | (1) |
|
|
336 | (20) |
|
|
337 | (1) |
|
|
337 | (1) |
|
|
338 | (1) |
|
|
339 | (1) |
|
|
339 | (1) |
|
|
340 | (2) |
|
|
342 | (3) |
|
|
345 | (1) |
|
Package Information and Automatic Installs |
|
|
346 | (4) |
|
|
350 | (1) |
|
Changing the Package Database |
|
|
351 | (1) |
|
|
352 | (1) |
|
|
353 | (1) |
|
|
354 | (1) |
|
|
355 | (1) |
|
Package Networking and Environment |
|
|
355 | (1) |
|
|
356 | (2) |
|
|
356 | (1) |
|
|
357 | (1) |
|
|
357 | (1) |
|
|
358 | (1) |
|
|
359 | (2) |
16 Customizing Software With Ports |
|
361 | (34) |
|
|
362 | (1) |
|
|
362 | (1) |
|
|
363 | (4) |
|
|
364 | (3) |
|
|
367 | (3) |
|
|
368 | (1) |
|
|
369 | (1) |
|
|
370 | (11) |
|
|
371 | (2) |
|
Port Customization Options |
|
|
373 | (6) |
|
|
379 | (1) |
|
Uninstalling and Reinstalling Ports |
|
|
379 | (1) |
|
Tracking Port Build Status |
|
|
379 | (1) |
|
|
380 | (1) |
|
|
380 | (1) |
|
Changing the Install Path |
|
|
380 | (1) |
|
Private Package Repositories |
|
|
381 | (10) |
|
|
382 | (1) |
|
Installing and Configuring Poudriere |
|
|
383 | (1) |
|
|
383 | (3) |
|
Install a Poudriere Ports Tree |
|
|
386 | (1) |
|
Configuring Poudriere Ports |
|
|
386 | (2) |
|
|
388 | (1) |
|
Using the Private Repository |
|
|
389 | (2) |
|
All Poudrieres, Large and Small |
|
|
391 | (1) |
|
|
391 | (1) |
|
|
391 | (1) |
|
|
392 | (1) |
|
|
393 | (2) |
17 Advanced Software Management |
|
395 | (26) |
|
Using Multiple Processors: SMP |
|
|
396 | (5) |
|
|
396 | (1) |
|
|
397 | (1) |
|
|
398 | (1) |
|
|
399 | (2) |
|
Threads, Threads, and More Threads |
|
|
401 | (1) |
|
Startup and Shutdown Scripts |
|
|
402 | (3) |
|
|
402 | (1) |
|
|
403 | (1) |
|
Special rc Script Providers |
|
|
404 | (1) |
|
Vendor Startup/Shutdown Scripts |
|
|
405 | (1) |
|
Debugging Custom rc Scripts |
|
|
405 | (1) |
|
Managing Shared Libraries |
|
|
405 | (5) |
|
Shared Library Versions and Files |
|
|
406 | (1) |
|
Attaching Shared Libraries to Programs |
|
|
406 | (3) |
|
LD_LIBRARY_PATH and LD_PRELOAD |
|
|
409 | (1) |
|
|
410 | (1) |
|
Remapping Shared Libraries |
|
|
410 | (2) |
|
Running Software from the Wrong OS |
|
|
412 | (6) |
|
|
412 | (1) |
|
|
413 | (1) |
|
|
413 | (1) |
|
|
414 | (1) |
|
|
414 | (1) |
|
Installing and Configuring the Linuxulator |
|
|
415 | (3) |
|
|
418 | (2) |
|
|
418 | (2) |
|
Running Software from the Wrong Architecture or Release |
|
|
420 | (1) |
18 Upgrading FreeBSD |
|
421 | (30) |
|
|
422 | (6) |
|
|
422 | (1) |
|
|
422 | (1) |
|
|
423 | (2) |
|
|
425 | (1) |
|
|
426 | (1) |
|
|
426 | (1) |
|
Which Version Should You Use? |
|
|
427 | (1) |
|
|
428 | (1) |
|
|
428 | (7) |
|
|
429 | (1) |
|
Running freebsd-update(8) |
|
|
430 | (4) |
|
|
434 | (1) |
|
Scheduling Binary Updates |
|
|
434 | (1) |
|
Optimizing and Customizing FreeBSD Update |
|
|
434 | (1) |
|
|
435 | (2) |
|
|
435 | (2) |
|
|
437 | (1) |
|
Building FreeBSD from Source |
|
|
437 | (11) |
|
|
438 | (1) |
|
Build, Install, and Test a Kernel |
|
|
439 | (1) |
|
Prepare to Install the New World |
|
|
440 | (3) |
|
|
443 | (3) |
|
|
446 | (2) |
|
Upgrades and Single-User Mode |
|
|
448 | (1) |
|
|
448 | (1) |
|
Packages and System Upgrades |
|
|
449 | (1) |
|
|
450 | (1) |
19 Advanced Security Features |
|
451 | (40) |
|
|
452 | (2) |
|
|
453 | (1) |
|
A Sample Unprivileged User |
|
|
453 | (1) |
|
|
454 | (1) |
|
Default Accept vs. Default Deny |
|
|
454 | (1) |
|
|
455 | (7) |
|
|
456 | (6) |
|
|
462 | (1) |
|
|
462 | (8) |
|
|
463 | (1) |
|
Default Accept and Default Deny in Packet Filtering |
|
|
463 | (1) |
|
Basic Packet Filtering and Stateful Inspection |
|
|
464 | (1) |
|
|
465 | (2) |
|
Small-Server PF Rule Sample |
|
|
467 | (2) |
|
|
469 | (1) |
|
|
470 | (5) |
|
|
471 | (1) |
|
|
471 | (2) |
|
Configuring Blacklistd Clients |
|
|
473 | (1) |
|
|
474 | (1) |
|
|
474 | (1) |
|
|
475 | (7) |
|
|
477 | (1) |
|
|
478 | (3) |
|
TLS Trick: Connecting to TLS-Protected Ports |
|
|
481 | (1) |
|
|
482 | (3) |
|
|
483 | (1) |
|
|
484 | (1) |
|
Nonexecutable Stack and Stack Guard |
|
|
484 | (1) |
|
|
485 | (1) |
|
Preparing for Intrusions with mtree(1) |
|
|
485 | (4) |
|
|
486 | (1) |
|
mtree(1) Output: The Spec File |
|
|
487 | (1) |
|
|
488 | (1) |
|
|
488 | (1) |
|
Finding System Differences |
|
|
488 | (1) |
|
Monitoring System Security |
|
|
489 | (1) |
|
|
490 | (1) |
|
|
490 | (1) |
20 Small System Services |
|
491 | (34) |
|
|
491 | (8) |
|
|
492 | (1) |
|
SSH Keys and Fingerprints |
|
|
493 | (1) |
|
Configuring the SSH Daemon |
|
|
494 | (2) |
|
|
496 | (1) |
|
|
497 | (2) |
|
|
499 | (5) |
|
|
499 | (1) |
|
|
500 | (3) |
|
|
503 | (1) |
|
|
504 | (3) |
|
|
504 | (1) |
|
|
505 | (2) |
|
|
507 | (1) |
|
|
508 | (4) |
|
|
509 | (1) |
|
Configuring inetd Servers |
|
|
510 | (1) |
|
|
511 | (1) |
|
Changing inetd's Behavior |
|
|
512 | (1) |
|
|
512 | (4) |
|
|
513 | (1) |
|
|
514 | (2) |
|
|
516 | (1) |
|
Printing and Print Servers |
|
|
516 | (2) |
|
|
517 | (1) |
|
|
518 | (1) |
|
|
518 | (2) |
|
|
518 | (1) |
|
|
519 | (1) |
|
|
519 | (1) |
|
|
519 | (1) |
|
|
520 | (5) |
|
|
520 | (3) |
|
|
523 | (2) |
21 System Performance And Monitoring |
|
525 | (38) |
|
|
526 | (1) |
|
|
527 | (1) |
|
General Bottleneck Analysis with vmstat(8) |
|
|
528 | (4) |
|
|
529 | (1) |
|
|
529 | (1) |
|
|
530 | (1) |
|
|
530 | (1) |
|
|
531 | (1) |
|
|
531 | (1) |
|
|
531 | (1) |
|
|
531 | (1) |
|
|
532 | (1) |
|
CPU, Memory, and I/O with top(1) |
|
|
533 | (6) |
|
|
533 | (3) |
|
|
536 | (1) |
|
|
537 | (1) |
|
|
538 | (1) |
|
|
539 | (1) |
|
|
540 | (1) |
|
|
541 | (1) |
|
|
541 | (1) |
|
|
541 | (4) |
|
|
542 | (1) |
|
|
542 | (1) |
|
|
543 | (1) |
|
|
543 | (1) |
|
Reprioritizing with Niceness |
|
|
543 | (2) |
|
|
545 | (1) |
|
|
546 | (7) |
|
|
546 | (1) |
|
|
547 | (1) |
|
Processing Messages with syslogd(8) |
|
|
548 | (4) |
|
|
552 | (1) |
|
|
553 | (4) |
|
|
553 | (1) |
|
|
553 | (1) |
|
|
554 | (1) |
|
|
554 | (1) |
|
|
554 | (1) |
|
|
554 | (2) |
|
|
556 | (1) |
|
|
556 | (1) |
|
|
557 | (1) |
|
Sample newsyslog.conf Entry |
|
|
557 | (1) |
|
|
557 | (6) |
|
|
557 | (3) |
|
|
560 | (3) |
22 Jails |
|
563 | (20) |
|
|
564 | (1) |
|
|
565 | (3) |
|
|
565 | (1) |
|
|
565 | (3) |
|
|
568 | (1) |
|
|
568 | (7) |
|
|
569 | (1) |
|
|
569 | (4) |
|
Testing and Configuring a Jail |
|
|
573 | (1) |
|
Jail Startup and Shutdown |
|
|
574 | (1) |
|
|
575 | (1) |
|
|
575 | (4) |
|
Viewing Jails and Jail IDs |
|
|
575 | (1) |
|
|
575 | (1) |
|
Running Commands in Jails |
|
|
576 | (2) |
|
|
578 | (1) |
|
|
578 | (1) |
|
|
579 | (1) |
|
|
580 | (1) |
|
|
581 | (2) |
23 The Fringe Of FreeBSD |
|
583 | (16) |
|
|
584 | (2) |
|
|
584 | (1) |
|
|
585 | (1) |
|
|
586 | (1) |
|
|
586 | (1) |
|
Universal Configuration Language |
|
|
587 | (1) |
|
|
587 | (5) |
|
|
588 | (1) |
|
|
588 | (2) |
|
tftpd and the Boot Loader |
|
|
590 | (1) |
|
|
591 | (1) |
|
The NFS Server and the Diskless Client Userland |
|
|
591 | (1) |
|
Diskless Farm Configuration |
|
|
592 | (2) |
|
|
593 | (1) |
|
|
593 | (1) |
|
|
594 | (1) |
|
|
594 | (1) |
|
|
595 | (1) |
|
|
595 | (4) |
|
Generating and Using a Cryptographic Key |
|
|
597 | (1) |
|
Filesystems on Encrypted Devices |
|
|
597 | (2) |
24 Problem Reports And Panics |
|
599 | (14) |
|
|
600 | (6) |
|
|
601 | (1) |
|
|
602 | (1) |
|
|
603 | (1) |
|
|
603 | (2) |
|
|
605 | (1) |
|
|
606 | (1) |
|
|
606 | (1) |
|
|
607 | (6) |
|
|
608 | (1) |
|
|
608 | (1) |
|
|
609 | (1) |
|
|
610 | (1) |
|
|
610 | (1) |
|
|
611 | (2) |
Afterword |
|
613 | (6) |
|
|
613 | (2) |
|
|
615 | (1) |
|
|
615 | (1) |
|
|
616 | (1) |
|
|
617 | (2) |
Bibliography |
|
619 | (2) |
|
|
619 | (1) |
|
|
620 | (1) |
Index |
|
621 | |