Re: security: what does OpenBSD have, that FreeBSD doesn't have...

1999-05-24 Thread Jordan K. Hubbard
What make OpenBSD so secure ? Or can this kind of security be reproduced with FreeBSD ports ? I think of tools like: It's not the tools but the amount of time supposedly invested in improving security. I say supposedly because a lot of the buffer overflow issues they've dealt with haven't been

Re: security: what does OpenBSD have, that FreeBSD doesn't have.

1999-05-24 Thread Jordan K. Hubbard
I'm not sure..I've been wandering through the openbsd source tree and merging useful diffs from binaries, but I haven't been too organised about it so far, and haven't encountered much in the way of important fixes. I'm sure there are some, though. While it can rightfully be said that OpenBSD

RE: security: what does OpenBSD have, that FreeBSD doesn't have.

1999-05-23 Thread Jeroen Ruigrok/Asmodai
Hi Andreas =) On 23-May-99 Andreas Klemm wrote: Am currently discussing FreeBSD vs. OpenBSD in private e-mail. What make OpenBSD so secure ? Or can this kind of security be reproduced with FreeBSD ports ? I think of tools like: Ye missed one of the most important things: auditing of the

RE: security: what does OpenBSD have, that FreeBSD doesn't have.

1999-05-23 Thread sthaug
The OpenBSD team does a lot wrt auditing of the complete sourcetree, but then the question is: is this valid concern or is this pure paranoia. OpenBSD does a lot of valid changes but borders (and sometimes crosses thta border) on paranoia, wrt code. Given the number of postings to BUGTRAQ

RE: security: what does OpenBSD have, that FreeBSD doesn't have.

1999-05-23 Thread Jeroen Ruigrok/Asmodai
On 23-May-99 sth...@nethelp.no wrote: The OpenBSD team does a lot wrt auditing of the complete sourcetree, but then the question is: is this valid concern or is this pure paranoia. OpenBSD does a lot of valid changes but borders (and sometimes crosses that border) on paranoia, wrt code.

RE: security: what does OpenBSD have, that FreeBSD doesn't have.

1999-05-23 Thread Kris Kennaway
On Sun, 23 May 1999 sth...@nethelp.no wrote: The OpenBSD team does a lot wrt auditing of the complete sourcetree, but then the question is: is this valid concern or is this pure paranoia. OpenBSD does a lot of valid changes but borders (and sometimes crosses thta border) on paranoia, wrt

Re: security: what does OpenBSD have, that FreeBSD doesn't have.

1999-05-23 Thread Dan Moschuk
| One of my plans is to merge all of these changes into our tree (along with all | the other minor changes/manpage corrections, etc). | | Longer term, I'd like to work on porting some of their kernel code like | randomized sin_port selection and TCP initial sequence numbering, probably | hidden

Re: security: what does OpenBSD have, that FreeBSD doesn't have.

1999-05-23 Thread Warner Losh
In message pine.osf.4.10.9905232037320.11148-100...@mercury.physics.adelaide.edu.au Kris Kennaway writes: : One of my plans is to merge all of these changes into our tree : (along with all the other minor changes/manpage corrections, etc). Which ones are currently missing? Also, beware. Most

Re: security: what does OpenBSD have, that FreeBSD doesn't have.

1999-05-23 Thread Kris Kennaway
On Sun, 23 May 1999, Warner Losh wrote: In message pine.osf.4.10.9905232037320.11148-100...@mercury.physics.adelaide.edu.au Kris Kennaway writes: : One of my plans is to merge all of these changes into our tree : (along with all the other minor changes/manpage corrections, etc). Which