===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/security.html,v
retrieving revision 1.20
retrieving revision 1.21
diff -c -r1.20 -r1.21
*** www/security.html	1998/02/20 21:44:08	1.20
--- www/security.html	1998/02/21 15:49:58	1.21
***************
*** 90,96 ****
--- 90,129 ----
  <li><a href=/errata.html#mmap>Read-write mmap() flaw (patch included)</a>
  </ul>
  
+ 
  <p>
+ <h3><font color=#e00000><strong>Watching our Security Changes</strong></font></h3>
+ Since we take a proactive stance with security, we are continually
+ finding and fixing new security problems.  Not all of these problems
+ get widely reported because (as stated earlier) many of them are not
+ confirmed to be exploitable.  We do not have the time resources to
+ make these changes available in the above format.<p>
+ 
+ Thus there are usually minor security fixes in the current source code
+ beyond the previous major OpenBSD release.  We make a limited
+ gaurantee that these problems are of limited impact and unproven
+ exploitability.  If we discover a problem definately matters for
+ security, patches will show up here quickly.<p>
+ 
+ People who are really concerned with critical
+ security can do a number of things:<p>
+ 
+ <ul>
+ <li>If you understand security issues, watch our
+ 	<a href=/mail.html>source-changes mailing list</a> and keep an
+ 	eye out for things which appear security changes.  Since
+ 	exploitability is not proven for many of the fixes we make,
+ 	do not expect the relevant commit message to say "SECURITY FIX!".
+ 	If a problem is proven and serious, a patch will be available
+ 	here very shortly after.
+ <li>Track our current source code tree, and teach yourself how to do a
+ 	complete system build from time to time.  Make the assumption
+ 	that the current source tree always has stronger security.
+ <li>Install a binary <a href=/snapshots.html>snapshots</a>, which are
+ 	made available fairly often.
+ </ul>
+ 
+ <p>
  <h3><font color=#e00000><strong>Other Resources</strong></font></h3>
  Other security advisories that have (in the past) affected OpenBSD can
  be found at the <a href=http://www.secnet.com/nav1.html>Secure Networks archive</a>.
***************
*** 104,110 ****
  <hr>
  <font size="-1">
  <em>This site Copyright &copy; 1996-1998 OpenBSD.</em><br>
! $OpenBSD: security.html,v 1.20 1998/02/20 21:44:08 deraadt Exp $
  </font>
  
  </BODY>
--- 137,143 ----
  <hr>
  <font size="-1">
  <em>This site Copyright &copy; 1996-1998 OpenBSD.</em><br>
! $OpenBSD: security.html,v 1.21 1998/02/21 15:49:58 deraadt Exp $
  </font>
  
  </BODY>