It depends.
If you call linux: debian or ubuntu or centOS, even with unsafe defaults freeBSD is secured.
Compared to untuntu/debian/centOS freeBSD has got bleeding edge softwares coming from upstream. That is the power of SOURCE distribution. Theses packages being compiled it may suit you. I must admit FLAVORED packages (make.conf templates) make sense.
I remember being a linux sysadmins and building my openLDAP/python/php packages from source by hand that were 4 years old with envy wondering WHY?!
Since systemd and my migration to BSD I have no regrets.
PF, ipfw are way more powerful than any linux firewall tools.
I have upstream stable software in the stable distribution.
I don't have systemd.
I have jails... And I have no religion switching to openBSD for core servers that need security knowing I have very few knowledge costs in doing so.
And be it capsicum or privilege dropping I look at linux containers techno as a smoke screen for poor man's security through obfuscation.
My advice is be smart: don't trust me, but if you are in between experiment.
If you call linux: debian or ubuntu or centOS, even with unsafe defaults freeBSD is secured.
Compared to untuntu/debian/centOS freeBSD has got bleeding edge softwares coming from upstream. That is the power of SOURCE distribution. Theses packages being compiled it may suit you. I must admit FLAVORED packages (make.conf templates) make sense.
I remember being a linux sysadmins and building my openLDAP/python/php packages from source by hand that were 4 years old with envy wondering WHY?!
Since systemd and my migration to BSD I have no regrets.
PF, ipfw are way more powerful than any linux firewall tools.
I have upstream stable software in the stable distribution.
I don't have systemd.
I have jails... And I have no religion switching to openBSD for core servers that need security knowing I have very few knowledge costs in doing so.
And be it capsicum or privilege dropping I look at linux containers techno as a smoke screen for poor man's security through obfuscation.
My advice is be smart: don't trust me, but if you are in between experiment.