Chinaunix首页 | 论坛 | 博客
  • 博客访问: 58817
  • 博文数量: 44
  • 博客积分: 1245
  • 博客等级: 中尉
  • 技术积分: 255
  • 用 户 组: 普通用户
  • 注册时间: 2010-05-08 10:41
文章分类

全部博文(44)

文章存档

2013年(1)

2012年(5)

2011年(38)

我的朋友

分类: BSD

2011-12-31 15:36:50

The OpenBSD project is small. The target audience for the operating system is the project developers themselves. They just happen to make all source code open to anyone to do as they please (as long as copyright notices are preserved). The project does not have an extensive support structure in place, so users of the operating system are expected to be able to find their own answers. While many may interpret this to mean that Google is the solution to all problems, it is not. Having knowledge of what documentation the project makes available, & taking the time to study it in earnest marks successful users. As someone new to OpenBSD, you should study the project's  &  for answers to your questions. Understanding OpenBSD means understanding its culture. All conversation on technical matters quickly turn to the most authoritative source held by the project -- its .

As noted earlier, your questions are very open-ended. Given that this is your first message at this site, we do not know what is your background or understanding to the Unix world & way of thinking. Consequently, I will give short answers to most of your questions. This may or may not be sufficient for you needs. You are invited to respond with more specific questions, but be forewarned that you should do your homework first. Study the information provided. Read through the FAQ. Doing anything less is short-changing yourself & your troubleshooting abilities. You are also invited to read the following thread which gives information on how to ask effective questions:



Quote:
# strlcpy() and strlcat()
Study the manpages --  & .
Quote:
# Chroot jailing
OpenBSD does not support jails in the FreeBSD sense. The extent of chroot can be found by studying the manpage -- .
Quote:
* .rodata segment
This is a segment defined at the assembly language level containing read-only information. For more information, look at the general article found at Wikipedia:


Quote:
# Memory protection purify

* W^X
* Guard pages
* Randomized malloc()
* Randomized mmap()
* atexit() and stdio protection 

# Privilege separation
# Privilege revocation
# New uids
# ProPolice
The project's leader, Theo de Raadt, gave a talk in 2004 which covers most of these items. The slides are available, & you should take the time to study them:



Again, follow-up questions are encouraged, but you will be doing yourself a favor by taking the time to study the information provided first.

阅读(325) | 评论(0) | 转发(0) |
给主人留下些什么吧!~~