Goal
--- 56,62 ----
!
Goal
*************** *** 129,134 **** --- 129,162 ---- managed such a success is the lpd advisory that Secure Networks put out.
New Technologies
+ + As we audit source code, we often invent new ways of solving problems. + Sometimes these ideas have been used before in some random application + written somewhere, but perhaps not taken to the degree that we do. +
+ +
-
+
- strlcpy() and strlcat() +
- Memory protection purify
+
-
+
- W^X +
- .rodata segment +
- Guard pages +
- Randomized malloc() +
- Randomized mmap() +
- atexit() and stdio protection +
- Privilege seperation +
- Privilege revocation +
- Chroot jailing +
- New uids +
- ProPolice +
- ... and others +
+
The Reward
Our proactive auditing process has really paid off. Statements like *************** *** 1169,1175 ****
www@openbsd.org
! $OpenBSD: security.html,v 1.277 2004/03/17 22:22:05 millert Exp $