On Sun, 23 May 1999 sth...@nethelp.no wrote:

> > The OpenBSD team does a lot wrt auditing of the complete sourcetree, but
> > then the question is: is this valid concern or is this pure paranoia.
> > OpenBSD does a lot of valid changes but borders (and sometimes crosses thta
> > border) on paranoia, wrt code.
> 
> Given the number of postings to BUGTRAQ about array overflows and stack
> smashing, I think it's relevant to ask whether it possible to be *too*
> paranoid here. Personally, I think what the OpenBSD folks are doing is
> very important.

One of my plans is to merge all of these changes into our tree (along with all
the other minor changes/manpage corrections, etc).

Longer term, I'd like to work on porting some of their kernel code like
randomized sin_port selection and TCP initial sequence numbering, probably
hidden behind sysctl knobs (defaulting to off to keep people happy).

Kris

-----
"That suit's sharper than a page of Oscar Wilde witticisms that's been
rolled up into a point, sprinkled with lemon juice and jabbed into
someone's eye"
"Wow, that's sharp!" - Ace Rimmer and the Cat, _Red Dwarf_



To Unsubscribe: send mail to majord...@freebsd.org
with "unsubscribe freebsd-hackers" in the body of the message

Reply via email to