From owner-freebsd-hackers Sun May 23 4:16:59 1999 Delivered-To: freebsd-hackers@freebsd.org Received: from adelphi.physics.adelaide.edu.au (adelphi.physics.adelaide.edu.au [129.127.36.247]) by hub.freebsd.org (Postfix) with ESMTP id B44B715102 for ; Sun, 23 May 1999 04:16:52 -0700 (PDT) (envelope-from kkennawa@physics.adelaide.edu.au) Received: from mercury (mercury [129.127.36.44]) by adelphi.physics.adelaide.edu.au (8.8.8/8.8.8/UofA-1.5) with SMTP id UAA11541; Sun, 23 May 1999 20:46:50 +0930 (CST) Received: from localhost by mercury; (5.65v3.2/1.1.8.2/27Nov97-0404PM) id AA11149; Sun, 23 May 1999 20:46:48 +0930 Date: Sun, 23 May 1999 20:46:48 +0930 (CST) From: Kris Kennaway To: sthaug@nethelp.no Cc: asmodai@wxs.nl, andreas@klemm.gtn.com, hackers@freebsd.org Subject: RE: security: what does OpenBSD have, that FreeBSD doesn't have. In-Reply-To: <14446.927449800@verdi.nethelp.no> Message-Id: Mime-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Sun, 23 May 1999 sthaug@nethelp.no wrote: > > The OpenBSD team does a lot wrt auditing of the complete sourcetree, but > > then the question is: is this valid concern or is this pure paranoia. > > OpenBSD does a lot of valid changes but borders (and sometimes crosses thta > > border) on paranoia, wrt code. > > Given the number of postings to BUGTRAQ about array overflows and stack > smashing, I think it's relevant to ask whether it possible to be *too* > paranoid here. Personally, I think what the OpenBSD folks are doing is > very important. One of my plans is to merge all of these changes into our tree (along with all the other minor changes/manpage corrections, etc). Longer term, I'd like to work on porting some of their kernel code like randomized sin_port selection and TCP initial sequence numbering, probably hidden behind sysctl knobs (defaulting to off to keep people happy). Kris ----- "That suit's sharper than a page of Oscar Wilde witticisms that's been rolled up into a point, sprinkled with lemon juice and jabbed into someone's eye" "Wow, that's sharp!" - Ace Rimmer and the Cat, _Red Dwarf_ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message