===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/innovations.html,v
retrieving revision 1.26
retrieving revision 1.27
diff -u -r1.26 -r1.27
--- www/innovations.html 2016/01/08 13:06:28 1.26
+++ www/innovations.html 2016/01/16 22:10:12 1.27
@@ -311,7 +311,44 @@
First implemented by
Niels Provos
and Markus Friedl in OpenSSH in March 2002, released with OpenBSD 3.2.
- The concept is now used in many programs.
+ The concept is now used in many OpenBSD programs, for example
+ bgpd(8),
+ dhclient(8),
+ dhcpd(8),
+ dvmrpd(8),
+ eigrpd(8),
+ file(1),
+ httpd(8),
+ iked(8),
+ ldapd(8),
+ ldpd(8),
+ mountd(8),
+ npppd(8),
+ ntpd(8),
+ ospfd(8),
+ ospf6d(8),
+ pflogd(8),
+ radiusd(8),
+ relayd(8),
+ ripd(8),
+ script(1),
+ smtpd(8),
+ syslogd(8),
+ tcpdump(8),
+ tmux(1),
+ xconsole(1),
+ xdm(1),
+ Xserver(1),
+ ypldap(8),
+ etc.
+Privilege revocation:
+ Related to the work on privilege separation, some programs were refactored
+ to drop privileges while holding onto a tricky resource such as a raw socket,
+ reserved port, or modification-locked bpf(4) descriptor,
+ for example
+ ping(8),
+ traceroute(8),
+ etc.
Stack protector: Developed since 2001 as "propolice" by Hiroaki Etoh.
Integrated, and implemented for additional hardware platforms,
by Miod Vallat and Theo de Raadt. OpenBSD 3.3 was the first operating