On Friday 27 May 2005 19:47, Kwan Lowe wrote:
> As far as applications go, Linux and OpenBSD share much of the same code
> so it's sort of a wash as far as user space security. For servers, the
I personally agree with most but this is not entirely correct. OBSD uses
amongst other things random memory allocations, priviledge separation and
revocation. ProPolice handles buffer overflows, and so on. These features
keeps the machine secure in user space as well.
But I do agree with the TCP stack, even the hard disk I/O is not the best.
OBSD does however have a very complete support for most protocols.
> SELinux extensions are really powerful. I worked at a firewall company
> recently and they chose Linux over OpenBSD because of the MAC (mandatory
> access control) features of SELinux *and* because the Linux TCP/IP stack
> was better in most cases than OpenBSD's (in fact, some benchmarks place
> OpenBSD *last* http://bulk.fefe.de/scalability/ ). Linux currently has
> much better scalability (SMP support, e.g.) and this is really necessary
> for higher end systems.
I'm not so sure if I'd give up the above OBSD features for the faster stack.
When you leave x86 OBSD get's even better as you can get even better (more
security minded processors) with f.ex. Sun.
Linux has a tremendous forward momentum and offers a number of compelling
reasons to use with something like SELinux. My problem is that after seing
how ingenious good hackers are, I don't want to give up on some of these
features that OBSD offers.
--Steve Szmidt
"They that would give up essential liberty for temporary safety deserve neither liberty nor safety." Benjamin Franklin ----------------------------------------------------------------------- This list is provided as an unmoderated internet service by Networked Knowledge Systems (NKS). Views and opinions expressed in messages posted are those of the author and do not necessarily reflect the official policy or position of NKS or any of its employees.
This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 19:22:47 EDT