>
> Note that the reason that OpenBSD can claim only two security holes in
> the default install in the past 10 years is that there are no services
> active in a default install (you have to add commands to the startup
> script to enable them).

Except they don't make that claim, OpenBSD claims two _remote_
security holes in the last ten years, which is entirely different from
only two security holes.  They aren't making any claims about local
exploits.

>
> People reoutinely built appliances like routers using OpenBSD and e.g. a
> Soekris box and put it on the shelf.  They may only update it when a
> security bug happens (rarely).  Since there are simple HOWTOs for making
> OpenBSD on a CF card, updating the appliance consists of swapping the CF
> card.

People do the same thing using variants of the Linux kernel.  The bsd
kernel is nothing special in that regard :)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to