===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/32.html,v
retrieving revision 1.11
retrieving revision 1.12
diff -u -r1.11 -r1.12
--- www/32.html	2002/10/11 06:23:39	1.11
+++ www/32.html	2002/10/15 12:21:24	1.12
@@ -76,6 +76,15 @@
 now enabled by default for greater robustness.
 <p>
 
+<li>Non-executable stack on i386, sparc, sparc64, alpha, powerpc.
+No-exec data and bss on sparc, sparc64, and alpha.  This makes some
+classes of future potential buffer overflows unexploitable.
+<p>
+
+<li>Apache runs chroot'd by default.  To disable this, see the new <b>-u</b>
+option.
+<p>
+
 <li>Asymmetric and symmetric hardware encryption support is now enabled by
 default, if you have such devices in your machine.
 <p>
@@ -425,7 +434,7 @@
 alt="OpenBSD"></a> 
 <a href="mailto:www@openbsd.org">www@openbsd.org</a>
 <br><small>
-$OpenBSD: 32.html,v 1.11 2002/10/11 06:23:39 deraadt Exp $
+$OpenBSD: 32.html,v 1.12 2002/10/15 12:21:24 deraadt Exp $
 </small>
 
 </body>