The FreeBSD virtual memory system allows files to be memory-mapped. All or parts of a file can be made available to a process via its address space. The process can then access the file using memory operations rather than filesystem I/O calls.
The ptrace(2) system call provides tracing and debugging facilities by allowing one process (the tracing process) to watch and control another (the traced process).
Due to insufficient permission checks in the virtual memory system, a tracing process (such as a debugger) may be able to modify portions of the traced process’s address space to which the traced process itself does not have write access.
This error can be exploited to allow unauthorized modification of an arbitrary file to which the attacker has read access, but not write access. Depending on the file and the nature of the modifications, this can result in privilege escalation.
For a solution, check out the security advisory: FreeBSD-SA-13:06.mmap
These are a couple of random FreeBSD related links you may find interesting:
nginx (pronounced “engine x”) is an open-source web server and a reverse proxy server for HTTP, SMTP, POP3, and IMAP protocols, with a strong focus on high concurrency, performance and low memory usage. [Read More - unixmen.com]
New FreeBSD development branch installation ISOs and virtual machine
disk images have been uploaded to the FTP mirrors.
Read More - lists.freebsd.org]
FreeNAS is awesome, but until recently it lacked HAST (Highly Available STorage). Fortunately now TrueNAS allows for this function to work. HAST is integrated into the FreeBSD base system, in turn HAST can be added into FreeNAS manually.
[Read More - hub.org]
The virtio framework allows guest operating systems running under the Linux KVM hypervisor to take advantage of near-native I/O performance. It works by providing kernel drivers for the guest OS which only work from within a KVM host, exposing I/O functionality through a much thinner layer of code than the traditional full-on emulation of physical hardware. The less code there is between a virtualized guest OS and the host’s physical hardware, the faster things will go.
[Read More - area536.com]
Generating a custom -current memstick image without all the debug feature enabled.
[Read More - blog.cochard.me]
BSD Router Project provided a VBScript for starting MS Windows based virtualbox lab. But because this vbs script works only on XP, I had to found a more powerful solution: Why not discovering PowerShell and using the VirtualBox COM API ?
[Read More - blog.cochard.me]
If you need Skype on FreeBSD (be aware though ;-), Artyom Mirgorodskiy managed to get the Linux version of Skype (126.96.36.199) to work on FreeBSD. The FreeBSD Skype port is deprecated, but if you follow the steps in Artyom’s guide, it should work fine.
I have not tried it, but if you’re successful, let us all know in the comments
iXsystems, the all-around FreeBSD company that builds FreeBSD certified servers and storage solutions, has announced that their TrueNAS Unified Storage Appliance has been now been certified as Citrix Ready.
“The Citrix Ready program helps customers identify third party solutions that are recommended to enhance virtualization, networking, and cloud computing solutions from Citrix. TrueNAS completed a rigorous verification process to ensure compatibility with Citrix XenServer®, providing confidence in joint solution compatibility.
The Citrix Ready program makes it easy for customers to identify complementary products and solutions that can enhance Citrix environments. Customers can be confident that TrueNAS™ has successfully passed a series of tests established by Citrix, and can be trusted to work effectively with XenServer to keep virtual machines available and business running smoothly.
TrueNAS has been verified for use with XenServer through both NFS and iSCSI. TrueNAS includes a wide variety of protocols and services to support both file-based and block-based usage. Completion of Citrix Ready verification is a step forward, confirming TrueNAS’s ability to integrate into virtualized environments. Many iXsystems clients already back their XenServer infrastructure with TrueNAS, enjoying easy management and reliable performance.
As a member of the Citrix Ready program, we are able to offer our clients intelligent solutions that combine TrueNAS unified storage with Citrix XenServer,” said Peter Allen, Applied Engineering Specialist. “The offering demonstrates our plans to work with trusted partners, through the Citrix Ready partner ecosystem, in order to provide the highest quality experience for our clients.”
Another happy, new FreeBSD user:
I found a major difference between Linux and FreeBSD: performance and memory usage. The performance was nearly same as Linux, but slightly better. Memory usage change, was drastic. FreeBSD is just too good at managing memory.
After the trial VPS, I started moving my stuff from the Gentoo VPS to the new one. Ran it for testing few days, and it continued to amaze me. FreeBSD’s official slogan is “The Power to Serve”. So much true is that! And that ended up as migrating other VPSes to FreeBSD as well.
Read the whole post here: The move from Linux to FreeBSD
If you were able to attend, it would be nice to hear in the comments below what you enjoyed most and which presentation you particularly enjoyed interested in.