From owner-freebsd-questions Sat Feb 2 21:49:18 2002 Delivered-To: freebsd-questions@freebsd.org Received: from caligula.anu.edu.au (caligula.anu.edu.au [150.203.224.42]) by hub.freebsd.org (Postfix) with ESMTP id 9337B37B402 for ; Sat, 2 Feb 2002 21:49:15 -0800 (PST) Received: (from avalon@localhost) by caligula.anu.edu.au (8.9.3/8.9.3) id QAA21515; Sun, 3 Feb 2002 16:49:02 +1100 (EST) From: Darren Reed Message-Id: <200202030549.QAA21515@caligula.anu.edu.au> Subject: Re: Security: FreeBSD vs OpenBSD To: drevil@sidereal.kz (Dr. Evil) Date: Sun, 3 Feb 2002 16:49:02 +1100 (Australia/ACT) Cc: inemes@transylvania.com.au, jylefort@brutele.be, freebsd-questions@FreeBSD.org, misc@openbsd.org In-Reply-To: <20020203050814.6954.qmail@sidereal.kz> from "Dr. Evil" at Feb 03, 2002 05:08:14 AM X-Mailer: ELM [version 2.5 PL1] MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG In some mail from Dr. Evil, sie said: [...] > EROS, the "Extremely Reliable Operating System" is a project to create > a new capabilities-based OS from scratch. Unfortunately this means > that it has a ways to go before we can get it on a CD and install it > like we can with *BSD and Linux. However, the design is fantastic, > and if they do get it to a real production-quality release, it will be > the first choice for a secure computing environemnt. I find that somewhat amusing, given all the flack the Orange Book model has received over the years. The above description fits a high level B or A grade machine (your OpenBSD doesn't even qualify for C2 as can Solaris and friends). Given that there are already products available which have been designed with capabilities in mind, from scratch, shouldn't we all be using those in environments where security must come first? Oh, most of them aren't free or available for pennies, either... Darren To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message