version 1.423, 2015/10/19 12:30:56 |
version 1.424, 2016/01/13 19:02:08 |
|
|
OpenBSD believes in strong security. Our aspiration is to be NUMBER |
OpenBSD believes in strong security. Our aspiration is to be NUMBER |
ONE in the industry for security (if we are not already there). Our |
ONE in the industry for security (if we are not already there). Our |
open software development model permits us to take a more |
open software development model permits us to take a more |
uncompromising view towards increased security than Sun, SGI, IBM, HP, |
uncompromising view towards increased security than most vendors are |
or other vendors are able to. We can make changes the vendors would |
able to. We can make changes the vendors would |
not make. Also, since OpenBSD is exported with <a href=crypto.html> |
not make. Also, since OpenBSD is exported with <a href=crypto.html> |
cryptography</a>, we are able to take cryptographic approaches towards |
cryptography</a>, we are able to take cryptographic approaches towards |
fixing security problems.<p> |
fixing security problems.<p> |
|
|
<li>Chroot jailing |
<li>Chroot jailing |
<li>New uids |
<li>New uids |
<li>ProPolice |
<li>ProPolice |
<li>... and others |
<li>... <a href="/innovations.html">and others</a> |
</ul> |
</ul> |
<p> |
<p> |
|
|
|
|
carefully). Users can make the assumption that the current |
carefully). Users can make the assumption that the current |
source tree always has stronger security than the previous release. |
source tree always has stronger security than the previous release. |
However, building your own system from source code is not trivial; |
However, building your own system from source code is not trivial; |
it is nearly 850MB of source code, and problems do occur as we |
it is over 850MB of source code, and problems do occur as we |
transition between major releases. |
transition between major releases. |
<li>Install a binary snapshot for your |
<li>Install a binary snapshot for your |
architecture, which are made available fairly often. For |
architecture, which are made available fairly often. For |
instance, an i386 snapshot is typically made available weekly. |
instance, an amd64 snapshot is typically made available daily. |
</ul> |
</ul> |
|
|
<p> |
<p> |