OpenBSD is a Unix computer operating system descended from Berkeley Software Distribution (BSD) which emphasizes portability, standardization, correctness, proactive security and integrated cryptography.
Questions tagged [openbsd]
34 questions
6
votes
2 answers
Is installing an old version of OpenBSD on an internet-facing server a security risk?
I have one specific package (moodle) which is not available on newer versions of the aforementioned OS. The last version of moodle was available on OpenBSD 5.3, which is more than 4 years old.
Knowing of OpenBSD's impressive security track…
user166931
- 69
- 2
6
votes
2 answers
Is there any safe OpenBSD desktop screenlocker?
Linux screen lockers don't seem so very secure, at least not in the past [1, 2, 3]. But is there any very secure OpenBSD screen locker?
(Or perhaps OpenBSD uses the same desktop related source code as Linux and therefore would have similar…
KajMagnus
- 707
- 1
- 5
- 10
3
votes
2 answers
For a simple purpose, a simple httpd server is more secure?
Using OpenBSD for example, we have a task to serve static html files, no php/cgi/etc.
Q: What would be more secure? Using a default apache/nginx -OR- using (KISS principle) a chrooted www server that is just one lines long? Example:
python -m…
gasko peter
- 873
- 2
- 12
- 21
3
votes
2 answers
Is OpenBSD's low number of exploits really that relevant?
The number of OpenBSD's known vulnerabilities is tiny, but so it's the number of users. How significant is this scarceness of exploits found?
Pierre B
- 248
- 1
- 4
2
votes
3 answers
Is running an OpenBSD in QEMU on an OpenBSD machine safe?
Is running an OpenBSD** using QEMU on an OpenBSD safer then running just natively an OpenBSD?
** = only used for apache + scp + ssh
I'm thinking about running the OS/webserver in QEMU because then I could be "more flexible" to use the securelevel…
LanceBaynes
- 6,279
- 12
- 63
- 92
1
vote
1 answer
Why does paxtest show OpenBSD as vulnerable?
install60.iso
Executable anonymous mapping (mprotect) : Vulnerable
Executable bss (mprotect) : Vulnerable
Executable data (mprotect) : Vulnerable
Executable heap (mprotect) : Vulnerable
Executable shared library bss (mprotect) :…
Peter84753
- 101
- 5
0
votes
3 answers
Verifying consistency of OpenBSD LiveCD
OpenBSD offers a live cd that can be downloaded at http://livecd-openbsd.sourceforge.net/
However, there is no md5sum, no sha256, no checksum of any kind on this page. How can we test this version for integrity?
Pierre B
- 248
- 1
- 4
0
votes
2 answers
Why is systrace insecure?
Why is the:
http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=4
Systrace marked as insecure?
Can someone explain the "why"?
gasko peter
- 873
- 2
- 12
- 21