OpenBSD is a Unix- like computer operating system and a successor to the Berkeley Software Suite ( BSD ), a Unix- derived system developed at the University of California, Berkeley . It was forked from NetBSD in late 1995 by Dutch-Canadian project leader Theo de Raut . In addition to OpenBSD, aUnix-likecomputeroperating systemanda successor to the Berkeley Software SuiteUnix-derived systemdeveloped atthe University of California, Berkeley , the OpenBSD project has written portable versions for many subsystems, the most Noteworthy are PF Firewall , OpenSSH and OpenNTPD, as packages, they are ubiquitous in other operating systems.
OpenBSD is a Unix-like computer operating system , a Unix derivative system developed by the University of California, Berkeley Berkeley Software Suite (BSD)
OpenBSD is a Unix-like computer operating system , a successor of the Unix- derived system Berkeley Software Suite (BSD) developed by the University of California, Berkeley OpenBSD is a Unix-like computer operating system , a Unix- derived system developed by the University of California, Berkeley A successor to the Berkeley Software Suite (BSD)
| OpenBSD |
|
| " Free, Functional & Secure " ( "Free, Functional & Secure" ) |
|
| OpenBSD desktop, manager is fvwm |
|
| Developer |
OpenBSD project |
| operating system family |
Unix- like ( BSD ) |
| operating status |
in operation |
| source mode |
open source |
| Initial Release |
October 1, 1996 |
| current version |
|
| package management system |
OpenBSD packaging tools and port tree |
| Support platform |
Alpha , x86-64 , IA-32 , MIPS , PowerPC , SPARC 32/64 and others |
| kernel class |
macro kernel |
| user space |
BSD |
| default user interface |
Modified pdksh , FVWM 2.2.5 for X11 |
| license |
BSD , ISC , ATU, other custom licenses |
| Official website |
|
| storehouse |
|
The program is known for its commitment to open source , high-quality documentation, firm software licenses , and focus on system security and code quality. The project is coordinated by de Rauter from his home in Calgary , Alberta, Canada . Its logo and mascot is a puffer fish named Puffy .
OpenBSD includes some security features that are missing or optional in other operating systems, and developers still have a tradition of auditing source code to find bugs and security problems. The project has strict restrictions on software licenses, and prefers to use the open source BSD license or its variants - in the past, it has also conducted a comprehensive audit of licenses and removed or replaced those released under unacceptable licenses. code.
Like most BSD -based operating systems, OpenBSD 's kernel and userspace programs, such as the shell and common tools like cat and ps , are co-developed in the same source code repository. Third-party software can be obtained as binary packages from the port tree , or compiled from source code. Also like most modern BSD operating systems, it runs perfectly in compatibility mode on binaries compiled for Linux on compatible computer architectures .
The OpenBSD project maintains ports for 20 different hardware platforms , including DEC Alpha , Intel i386 , HP PA-RISC , x86-64 , and Motorola 68000 processors, Apple PowerPC , Sun SPARC and SPARC64 computers, and Sharp Zaurus . The OpenBSD Foundation was accepted as a mentoring organization for Google Summer of Code 2014 .
application
OpenBSD boot process in console mode
OpenBSD console login and welcome message
Interact with OpenBSD 's pdksh (default shell )
OpenBSD 4.9 running X.Org , using the default FVWM window manager
OpenBSD 's security enhancements , built-in encryption and pf packet filters make it widely used in the security field, such as firewalls, intrusion detection systems and virtual private network gateways .
Proprietary systems from several vendors are based on OpenBSD , including appliances from Armorlogic ( Profense Web Application Firewall), Calyptix Security , GeNUA mbH , RTMX Inc , and .vantronix GmbH . Newer versions of Microsoft Services for UNIX extend the Unix- like capabilities of the Windows operating system , and much of OpenBSD 's code is used in the Interix interactive suite developed by Softway Systems , which was acquired by Microsoft in 1999 . The Windows security product Core Force is based on OpenBSD 's PF firewall .
OpenBSD comes with the X window system , which is suitable for desktop use. Many popular desktop toolkits are available, including desktop environments such as GNOME , KDE and Xfce , web browsers such as Konqueror , Firefox and Chromium , and multimedia programs MPlayer , VLC and xine . The project pursues the concept of minimal window management, which provides support for the cwm stacking window manager in the main distribution .
The open source software consultancy "M:tier" has deployed OpenBSD servers, desktops, and firewalls for many Fortune 500 companies in their enterprise environments .
OpenBSD comes with a full server suite that is easily configured as a mail server , web server , FTP server , DNS server , router , firewall or NFS file server . In addition, the software package system also contains software that provides other service agreements, such as SMB ( Samba ).
OpenBSD Components Project
Despite the small size of the team and the low OpenBSD usage, the project has managed to separate many components of the base system into portable versions with broad uses, including:
- LibreSSL , a free Secure Sockets Layer and Transport Layer Security implementation
- OpenBGPD , a free Border Gateway Protocol version 4 (BGP-4) implementation
- OpenOSPFD , a free and open shortest path first routing protocol implementation
- OpenNTPD , a simple replacement for ntp.org's Network Time Protocol daemon
- OpenSMTPD, a free Simple Mail Transfer Protocol (SMTP) daemon with support for IPv4 / IPv6 , PAM, Maildir and virtual domains
- OpenSSH , a free Secure Shell protocol implementation
- OpenIKED, a free implementation of the Internet Key Exchange Protocol (only supports ikev2)
- Common Address Redundancy Protocol (CARP), a free Cisco- patented replacement for HSRP/VRRP server redundancy protocols
- PF, IPv4 / IPv6 dual-protocol stateful firewall, supports NAT , PAT, QoS , traffic shaping
- pfsync, a firewall state synchronization protocol for PF firewalls, supports high reliability through CARP
- spamd, a spam filter that supports greylisting, designed to work with PF firewalls
- tmux , a free, safe, and maintainable alternative to the GNU Screen terminal multiplexer
- sndio, a compact audio and MIDI framework
- Xenocara, a custom X.Org compilation base
- cwm , the stackable window manager
- LibreSSL is a project cloned from OpenSSL in 2014, the main purpose is to improve the security of ssl components
Some subsystems have been incorporated into their cores by other BSD projects, and all of the above are available as software packages on other Unix-like systems, even Microsoft Windows .
Third-party components in the base system
- X.org , the X window environment with its own patches planned. Install with the x*.tgz installation filesets.
- GCC 4.2, 3.3 or 2.95 (depending on platform), GNU C compiler. Installed as part of the comp54.tgz fileset.
- Perl , with patches and modifications from the OpenBSD team.
- Nginx , the web server, with patches.
- SQLite , with patches and modifications from the OpenBSD team.
- Sendmail , mail server with libmilter.
- BIND , DNS server (with patch). OpenBSD has improved chroot and other security-related operations.
- NSD , the authoritative DNS server.
- Doas , which enables a user to execute a single command as a different identity. (OpenBSD since 5.8)
- Ncurses。
- Heimdal, an implementation of the Kerberos authentication protocol , with patches.
- Binutils , with patches.
- gdb , with patches.
- Less 444, with patches.
- Awk。
Development and Release Process
OpenBSD developers at the MIT c2k1 hackathon
The project adopts continuous development mode, and open, layered team management. Anyone with the right skills has the potential to be granted submission rights on a merit basis, with de Raut acting as coordinator. The team releases two official versions every year, the version number increments by 0.1 each time , and provides twelve months of support for each version. The snapshot ( snapshot ) version is updated very frequently. Maintenance patches for supported releases can be manually applied to the system, or periodically updated with the patch branch of the CVS repository.
In addition, if the system administrator wants to use the newly added functions as soon as possible, he can choose to upgrade to the snapshot version, and then update the system with the " current " branch of the CVS repository .
The project strongly recommends that everyone use the standard generic OpenBSD kernel maintained by the project , and custom kernels are not supported by the project, because " attempting to solve problems by customizing or ' optimizing ' the kernel will create more problems. "
The software outside the main system is compiled by CVS through the port tree , and the maintenance work is undertaken by the maintainer (also known as porter ). The package porter is responsible for updating the current branch of the software, as well as fixing bugs and providing maintenance patches for supported releases. Because the project is understaffed, the ports cannot be subject to constant and rigorous auditing like the main system.
Binary packages for each architecture are compiled centrally from the ports tree. This method is used for the current version, supported version, and snapshot version. The project recommends that system administrators use a package manager rather than compiling software from the ports tree unless they need to run their own modified source code.
A song will be released with the release of the new version.
history and popularity
A bar graph of the percentage of users of BSD variants , based on a 2005 BSD usage survey . Respondents could choose from multiple BSD variants.
In December 1994 , NetBSD co - founder Theo de Raut was asked to resign from his position as a senior NetBSD developer and core team member. The reason for this is not entirely clear, but it is rumored to be due to a personality disagreement with others on the NetBSD project and its mailing lists .
In October 1995 , de Raut forked a new project from NetBSD 1.0 and founded OpenBSD . The initial version , OpenBSD 1.2, was released in July 1996 , followed by OpenBSD 2.0 in October of the same year . Since then, the program has followed a biannual schedule of new releases, with one year of maintenance and support for each release. The latest version, OpenBSD 7.2, was released on October 20 , 2022 .
On July 25 , 2007 , OpenBSD developer Bob Baker announced the formation of the OpenBSD Foundation , a Canadian non-profit organization with the purpose of " having a legal entity as a point of contact when individuals and organizations want to support OpenBSD to deal with related matters " .
It is difficult to determine exactly how widely used OpenBSD is: its developers neither publish nor collect usage statistics, and there are few other sources of information. In September 2005 , the newly formed BSD Certification Group conducted a survey, which showed that 32.8 % of BSD users ( 1420 out of 4330 respondents ) use OpenBSD , the second largest share of the four major BSD variants, Second to FreeBSD 's 77 %, better than NetBSD 's 16.3 %.
Open Source and Open Documentation
At the beginning of OpenBSD's creation, Theo de Raoter believed that anyone should be able to easily obtain the source code at any time, so with the assistance of Chuck Klarna , he established a public, anonymous CVS server. It was the first of its kind in the software development world: by tradition at the time, only a small team of developers had access to a project's source code repository. According to Chuck and De Raoter , this approach " goes against the philosophy of open source " and is inconvenient for contributors. De Rauter 's decision allowed users to " do more " , reinforcing the plan's belief in open and publicly accessible source code.
The OpenBSD developers do not allow closed-source binary drivers to be included in the source tree, and are unwilling to sign non-disclosure agreements . Support for the Adaptec AAC RAID controller was removed from the standard OpenBSD kernel due to lack of documentation by the OpenBSD 3.7 release deadline.
OpenBSD 's policy of openness extends to hardware documentation: in a December 2006 slide show, de Rauter explained that without it " developers would often make mistakes when writing drivers " , noting that " like [ gosh , this will work ] Blind development is difficult to succeed, and some developers simply give up . " He went on to say that OpenBSD can't accept vendor binaries, " can't trust the vendor binaries that run in our kernel " , and says that " when things go wrong ... there's simply no way to fix [ them ]" .
license
The goal of the OpenBSD project is to " maintain the copyright spirit of the original Berkeley Unix " , namely " relatively unsecured Unix source code " . One of the famous examples is that OpenBSD will try to use the ISC license. For this reason, for newly written code, the Internet Systems Consortium ( ISC ) license is preferred , which is a simplified version of the BSD license but stripped of clauses unnecessary under the Berne Convention , but the MIT or BSD licenses are also acceptable accept. In comparison, the widely used GNU General Public License is considered too restrictive.
In June 2001 , because Darren Reid 's modification of IPFilter caused developers' concerns, OpenBSD launched a system license audit of ports and source trees. More than a hundred files were found throughout the system containing code without a license, with ambiguous licenses, or in violation of licenses. To ensure that the license is strictly followed, the developer contacted all relevant copyright holders: some code snippets were removed, many codes were replaced, others such as the multicast routing tools mrinfo and map - mbone , formerly Xerox The company only allowed research purposes, and was relicensed so that OpenBSD could continue to use them; the audit process also removed all software written by Daniel Burr Ernstein . At the time, Bernstein required his approval of all modified versions of his code before redistribution, and OpenBSD developers were unwilling to take the time and effort to do so. Removing the software sparked a run-in with Bernstein, who argued the move was entirely redundant. For example, he cited the less free license of the Netscape web browser , and accused the hypocritical OpenBSD developers of keeping Netscape while removing his software. OpenBSDThe point of the project is that, while Netscape is not open source, the conditions of its license are easier to abide by. They claim that Bernstein's desire for control over derivatives would waste a great deal of extra energy, and that the most appropriate way to meet his requirements is to delete them.
Due to licensing concerns, the OpenBSD team will choose to develop software from scratch, or use suitable existing software. Especially after the pf packet filter event, this component is included in IPFilter , first appeared in OpenBSD 3.0 , and now it can be seen on DragonFly BSD , NetBSD and FreeBSD . OpenBSD developers also use equivalent projects licensed under the BSD license or start new projects to replace tools licensed under the GPL (such as diff , grep , and pkg-config ), including the OpenBGPD routing daemon and the OpenNTPD time service daemon process.
fundraising
Although the operating system and its portable components are widely used in commercial products, de Raoter said that commercial companies give them almost no financial support: " Traditionally, our funds have all come from user donations and user purchases of CDs . (Other products don’t make money) Obviously, that’s not a lot of money. ”
In the early 2000s, the program was funded by DARPA for two years, allowing them to " hire 5 full-timers, spend $ 30,000 on hardware, and run 3 tournaments. "
De Raut expressed concern about the imbalance of funding sources: " I think that donations should come from manufacturers first, then corporate users, and then individual users. But the fact is almost the opposite. Very few people donated between 15 and $ 1 . To these guys, thank you! "
On January 14 , 2014 , Bob Baker posted a bulletin asking for donations to help pay for electricity . Without a sustained source of funding, OpenBSD would have had to shut down, Baker said. The project soon received a $20,000 bitcoin donation from Mircea Popescu, founder of the Romanian-based MPEx bitcoin exchange. The project hopes to raise $ 150,000 to pay the bills and address short-term funding concerns.
Security and Code Audit
Shortly after OpenBSD was founded, a local software security company, Secure Networks, Inc. ( SNI for short ), got in touch with Theo de Raoter . They are developing a " cyber security audit tool " called Ballista ( renamed Cybercop Scanner SNI after being acquired by the Network Alliance ), which aims to find and exploit possible software security vulnerabilities. This coincides with Ruote's own hobbies. Such a strong alliance makes the OpenBSD2.3 project progress rapidly, and the research focuses on system security.
OpenBSD is characterized by an extreme focus on system security. This includes additional APIs , such as the strlcat and strlcpy functions ; toolchain options, such as static range checkers; memory protection techniques to prevent invalid accesses, such as ProPolice and the W^X ( W xor X ) paging protection feature; and Cryptography and randomization techniques.
To reduce the risk of bugs and misconfigurations allowing privilege escalation , new programs and existing programs are written with attention to privilege separation, privilege revocation, and the use of chroot . Inspired by the principle of least privilege , OpenBSD pioneered the privilege separation technology, which separates the program into two or more parts, one of which runs operations that require privileges, and most of the other codes run those that do not require privileges. The permission revocation is similar to it, which is to revoke the permission after the program finishes the operation that requires the permission. Chrooting involves restricting an application 's access to a certain portion of the file system , preventing it from accessing areas that hold private or system files. The developers incorporated these features into OpenBSD versions of common software, including tcpdump and the Apache web server .
The OpenBSD developers created and maintain OpenSSH, a secure alternative to Telnet . OpenSSH is based on the original SSH suite and further developed by the OpenBSD team. It first appeared in OpenBSD 2.6 , and many operating systems now use OpenSSH , the most popular SSH implementation.
The project has a policy of continuous auditing of problematic code, which developer Mark Espie describes as " a never-ending process ... not just a fix for a particular problem " . He went on to list several typical actions after a problem is discovered, including checking the entire source tree for similar problems, "[ trying to ] verify whether the documentation needs to be revised " , and researching whether " the compiler needs to be modified to draw attention to this problem " .
Investigating possible FBI backdoors
On October 11 , 2010 , Gregory Perry sent an email to De Rauter , saying that the FBI had paid some former OpenBSD developers 10 years ago to encrypt Add your own backdoor to the framework . On December 14 , de Raut made the letter public on the openbsd-tech mailing list, and suggested an audit of the IPsec codebase . In fact, de Raut is skeptical of the backdoor theory, and he invites all developers to independently review the relevant code. Some bugs were fixed over the next few weeks, but no evidence of a backdoor was found.
slogan
The OpenBSD website has always emphasized the security record of the default installation. Until June 2002 , the OpenBSD website stated :
| With a default installation, no remote vulnerabilities have been found in the past five years! |
In June 2002 , a remote vulnerability was discovered in OpenSSH that could allow a remote attacker to gain root privileges on OpenBSD (and other systems running OpenSSH at the time). Of course this bug was quickly fixed. At the same time, the statement on the website was changed to:
| With a default installation, only one remote vulnerability has been discovered in nearly six years! |
In 2007 , a remote network-related vulnerability was discovered in OpenBSD , which was also quickly fixed. So the statement on the website was changed to:
| With the default install, only two remote exploits have been found in a long time! |
This slogan is still in use today.
But this statement has also been criticized, because few system services are running in the default installation, so some critics think that the tagline should be changed to " In the default installation, there are no working applications! "- in fact, most Users will open more services and install more software. The project statement says that the default installation is deliberately minimal to ensure that inexperienced users " don't need to become security experts overnight , " which is also in line with its purpose of making open source and code auditing practices an important part of the security system.
Distribution and Promotion
OpenBSD可以从多种方式自由获取：源代码可以从匿名CVS中检出，二进制文件和开发快照可以通过FTP、HTTP、rsync或AFS下载。预先包装好的CD-ROM集只需支付一小笔费用就可在网上购得，附带各种各样的贴纸和版本主题曲的拷贝。这些和他们的艺术品和其他奖金一道组成了该计划为数不多的收入来源，以负担硬件、带宽及支付其他费用。
同其他操作系统一样，OpenBSD提供了易于安装和管理程序的软件包管理系统，但它并不属于基本操作系统的一部分。软件包工具可以用软件包来提取、管理和移除二进制文件。在OpenBSD上，软件包的源代码储存于port系统中，其为一系列的Makefile文件和编译这个包所需的其他编译基础。OpenBSD中port和基础操作系统是一起开发和发布的：这意味着和4.6一起发布的port和软件包不适合用于4.5，反之亦然。
OpenBSD最初采用Phil Foglio所绘的BSD小恶魔作为他们的吉祥物守护进程，后者后来由约翰·拉塞特修改，马歇尔·柯克·麦库西克持有版权。 在后续版本中吉祥物有过更改，最终选定了Puffy，他们称之为一条河豚。从那时起Puffy就出现在各种OpenBSD宣传材料中，在发布歌曲和艺术品中也能看到。早期OpenBSD版本的宣传资料并没有一个统一的主题或设计，但后来每个版本的CD-ROM、发布歌曲、海报和T恤衫都有自己的单一风格和主题，有时其是由Plaid Tongued Devils的Ty Semaka所设计。这些都是倡导使用OpenBSD的一部分。每个版本会从道德或政治的角度阐述项目之所以重要的一个原因，通常是以戏仿的方式。
版本歷史
首个OpenBSD官方版（OpenBSD 2.0）于1996年10月发布，現已發展到2022年10月20日发布的OpenBSD 7.2。
| 版本 |
发布日期 |
| 1.2 |
1996年7月1日 |
| 2.0 |
1996年10月1日 |
| 2.1 |
1997年6月1日 |
| 2.2 |
1997年12月1日 |
| 2.3 |
1998年5月19日 |
| 2.4 |
1998年12月1日 |
| 2.5 |
1999年5月19日 |
| 2.6 |
1999年12月1日 |
| 2.7 |
2000年6月15日 |
| 2.8 |
2000年12月1日 |
| 2.9 |
2001年6月1日 |
| 3.0 |
2001年12月1日 |
| 3.1 |
2002年5月19日 |
| 3.2 |
2002年11月1日 |
| 3.3 |
2003年5月1日 |
| 3.4 |
2003年11月1日 |
| 3.5 |
2004年5月1日 |
| 3.6 |
2004年11月1日 |
| 3.7 |
2005年5月19日 |
| 3.8 |
2005年11月1日 |
| 3.9 |
2006年5月1日 |
| 4.0 |
2006年11月1日 |
| 4.1 |
2007年5月1日 |
| 4.2 |
2007年11月1日 |
| 4.3 |
2008年5月1日 |
| 4.4 |
2008年11月1日 |
| 4.5 |
2009年5月1日 |
| 4.6 |
2009年10月18日 |
| 4.7 |
2010年5月19日 |
| 4.9 |
2011年5月1日 |
| 5.0 |
2011年11月1日 |
| 5.1 |
2012年5月2日 |
| 5.2 |
2012年11月1日 |
| 5.3 |
2013年5月1日 |
| 5.4 |
2013年11月1日 |
| 5.5 |
2014年5月1日 |
| 5.6 |
2014年11月1日 |
| 5.7 |
2015年5月1日 |
| 5.8 |
2015年10月18日 |
| 5.9 |
2016年3月29日 |
| 6.0 |
2016年9月1日 |
| 6.1 |
2017年4月11日 |
| 6.2 |
2017年10月9日 |
| 6.3 |
2018年4月15日 |
| 6.4 |
2018年10月18日 |
| 6.5 |
2019年5月1日 |
| 6.6 |
2019年10月17日 |
| 6.7 |
2020年5月19日 |
| 6.8 |
2020年10月18日 |
| 7.0 |
2021年10月14日 |
| 7.1 |
2022年4月21日 |
| 7.2 |
2022年10月20日 |
文献
- Absolute OpenBSD, 2nd Edition（页面存档备份，存于） by Michael W. Lucas. ISBN 978-1-59327-476-4
- The OpenBSD Command-Line Companion, 1st ed. by Jacek Artymiak. ISBN 978-83-916651-8-3.
- Building Firewalls with OpenBSD and PF: Second Edition（页面存档备份，存于） by Jacek Artymiak. ISBN 978-83-916651-1-4.
- Mastering FreeBSD and OpenBSD Security（页面存档备份，存于） by Yanek Korff, Paco Hope and Bruce Potter. ISBN 978-0-596-00626-6.
- Absolute OpenBSD, Unix for the Practical Paranoid by Michael W. Lucas. ISBN 978-1-886411-99-9 (online copy here)
- Secure Architectures with OpenBSD by Brandon Palmer and Jose Nazario. ISBN 978-0-321-19366-7.
- The OpenBSD PF Packet Filter Book: PF for NetBSD, FreeBSD, DragonFly and OpenBSD（页面存档备份，存于） published by Reed Media Services. ISBN 978-0-9790342-0-6.
- Building Linux and OpenBSD Firewalls（页面存档备份，存于） by Wes Sonnenreich and Tom Yates. ISBN 978-0-471-35366-9.
- The OpenBSD 4.0 Crash Course（页面存档备份，存于） by Jem Matzan. ISBN 978-0-596-51015-2.
- The Book of PF A No-Nonsense Guide to the OpenBSD Firewall, 2nd edition by Peter N.M. Hansteen ISBN 978-1-59327-274-6 .
参见
- BSD操作系统比较
- 自由及開放原始碼軟體許可證比較
- 开源操作系统比较
- Hackathon
- KAME计划
- OpenBSD Journal
- pfSense
- POSSE计划
- 注重安全的操作系统
- LibreSSL
参考
-
- ^ 西奧·德·若特. . 2020年10月20日 （英語）.
- ^ , OpenBSD, [2011-12-13], （原始内容存档于2015-11-27）
- ^ 例如，爱特梅尔的固件只允许以目标代码的形式发布。atu-license OpenSBD CVS Repository
- ^ tigon许可证，tusb3410许可证，自定义许可证
- ^ . Marc.info. 2014-02-25 [2014-03-04]. （原始内容存档于2015-11-28）.
- ^ . Openbsdfoundation.org. [2014-03-04]. （原始内容存档于2014-03-03）.
- ^ McIntire, Tim, , Developerworks (IBM), 2006-08-08 [2011-12-13], （原始内容存档于2020-11-09）, Because OpenBSD is both thin and secure, one of the most common OpenBSD implementation purposes is as a firewall.
- ^ , RTMX Inc., [2011-12-13], （原始内容存档于2021-01-26）, RTMX O/S is a product extension to OpenBSD Unix-like operating system with emphasis on embedded, dedicated applications.
- ^ , Compumatica secure networks GmbH, [2011-12-13], （原始内容存档于2012-01-01）, The Next Generation Firewall is not a standalone device, it is a Router for operation in security critical environments with high requirements for availability, comprehensive support as well as reliable and trusted systems powered by OpenBSD.
- ^ , 微软新闻中心 (微软), 1999-09-17 [2014-05-24], （原始内容存档于2014-03-04）
- ^ Dohnert, Roberto J., , OSNews (戴维·亚当斯), 2004-01-21 [2014-05-24], （原始内容存档于2008-02-11）
- ^ , Core Labs, [2011-12-13], （原始内容存档于2011-11-28）, CORE FORCE provides inbound and outbound stateful packet filtering for TCP/IP protocols using a Windows port of OpenBSD's PF firewall, granular file system and registry access control and programs' integrity validation.
- ^ , Xenocara, [2011-12-13], （原始内容存档于2014-03-14）
- ^ Tzanidakis, Manolis, , Linux.com, 2006-04-21 [2012-03-09], （原始内容存档于2012-05-05）
- ^ , OpenBSD, [2011-12-13], （原始内容存档于2020-11-13）, Over 6,800 ports...Gnome 2.32.1, KDE 3.5.10.
- ^ Jacoutot, Antoine, , OpenBSD Journal (Daniel Hartmeier), 2011-04-20 [2014-05-24], （原始内容存档于2020-12-10）
- ^ The OpenBSD Project. . OpenBSD CVSweb. [2014-07-08]. （原始内容存档于2013-09-16）.
- ^ The OpenBSD Project. . OpenBSD CVSweb. [2014-07-08]. （原始内容存档于2013-11-27）.
- ^ Lucas, Michael W. 1st. No Starch Press. 2003 [15 June 2012]. ISBN 1-886411-99-9. （原始内容存档于2012-03-22）.
- ^ Andrews, Jeremy, , KernelTrap (Jeremy Andrews), 2006-05-02 [2014-05-24], （原始内容存档于2013-04-24）
- ^ , OpenBSD FAQ, [2011-12-13], （原始内容存档于2018-06-27）
- ^ (PDF), The BSD Certification Group, 2005-10-31 [2012-09-16], （原始内容存档 (PDF)于2014-03-14）
- ^ Glass, Adam. . netbsd-users (邮件列表). 1994-12-23 [2007-08-09]. （原始内容存档于2017-10-14）.
- ^ de Raadt, Theo. . openbsd-announce (邮件列表). 1996-10-18 [2014-05-24]. （原始内容存档于2005-05-27）.
- ^ , OpenBSD Foundation, [2011-12-13], （原始内容存档于2018-05-11）
- ^ Beck, Bob. . openbsd-misc (邮件列表). 2007-07-25 [2014-05-24]. （原始内容存档于2008-12-08）.
- ^ 问卷为多项选择，因为用户可能会同时使用多个BSD变种。
- ^ Cranor, Chuck D., , [2011-12-13], （原始内容存档于2011-07-25）, I also hosted and helped create the first Anonymous CVS server on the Internet (the original anoncvs.openbsd.org, which was also known as eap.ccrc.wustl.edu).
- ^ Cranor, Chuck D.; de Raadt, Theo, (PDF), USENIX, 1999-06-11 [2011-12-13], （原始内容存档 (PDF)于2011-06-07）
- ^ de Raadt, Theo, , OpenBSD CVS repository, 2010-04-07
- ^ de Raadt, Theo, , 2006-12-05 [2011-12-13], （原始内容存档于2020-11-09）
- ^ , OpenBSD, [2011-12-13], （原始内容存档于2017-11-13）
- ^ Matzan, Jem, , NewsForge (Linux.com), 2005-06-15 [2021-02-08], （原始内容存档于2008-02-07）
- ^ Gasperson, Tina, , Linux.com, 2001-06-06 [2014-05-24], （原始内容存档于2008-06-26）
- ^ , OpenBSD Manual Pages, [2011-12-13]
- ^ , OpenBSD Manual Pages, [2011-12-13]
- ^ de Raadt, Theo. . openbsd-misc (邮件列表). 2001-08-24 [2014-05-24]. （原始内容存档于2016-04-19）.
- ^ Bernstein, DJ. . openbsd-misc (邮件列表). 2001-08-27 [2014-05-24]. （原始内容存档于2012-02-04）.
- ^ Espie, Marc. . openbsd-misc (邮件列表). 2001-08-28 [2014-05-24]. （原始内容存档于2016-04-19）.
- ^ Hartmeier, Daniel, , Systor AG, [2011-12-13], （原始内容存档于2011-12-04）
- ^ OpenBSD的CVS日志记录了对diff、grep及pkg-config的改进。OpenBSD的OpenBGPD （页面存档备份，存于）及OpenNTPD （页面存档备份，存于）手册页。
- ^ Beck, Bob, , openbsd-misc (openbsd-misc), 14 January 2014 [2014-05-24], （原始内容存档于2020-11-12）
- ^ . Openbsdfoundation.org. [2014-05-24]. （原始内容存档于2020-11-11）.
- ^ Bright, Peter, , Ars Technica, 20 January 2014 [20 January 2014], （原始内容存档于2014-03-14）
- ^ Varghese, Sam, , The Age, 2004-10-08 [2011-12-13], （原始内容存档于2017-12-02）
- ^ Laird, Cameron; Staplin, George Peter, , ONLamp, 2003-07-17 [2016-11-19], （原始内容存档于2017-10-22）
- ^ de Raadt, Theo. . openbsd-misc (邮件列表). 2005-12-19 [2014-05-24]. （原始内容存档于2014-11-03）. Without [SNI's] support at the right time, this release probably would not have happened
- ^ Wayner, Peter, , 1st, HarperBusiness, 2000-07-13 [2011-12-13], ISBN 978-0-06-662050-3, （原始内容存档于2012-01-14）
- ^ Todd C., Miller; de Raadt, Theo, , Proceedings of the 1999 USENIX Annual Technical Conference (USENIX), 1999-06-06: 175–178 [2011-12-13], （原始内容存档于2011-09-27）
- ^ de Raadt, Theo; Hallqvist, Niklas; Grabowski, Artur; Keromytis, Angelos D. & Provos, Niels, (PDF), [2011-12-13], （原始内容存档 (PDF)于2016-05-08）
- ^ Provos, Niels, , 2003-08-09 [2011-12-13], （原始内容存档于2012-01-02）
- ^ OpenBSD的CVS日志记录了tcpdump中额外的特权分离，httpd的手册页中描述了其chroot的机制。
- ^ , OpenSSH, [2011-12-13], （原始内容存档于2013-12-24）
- ^ , OpenSSH, [2011-12-13], （原始内容存档于2020-08-09）
- ^ Biancuzzi, Federico, , ONLamp, 2004-03-18 [2011-12-13], （原始内容存档于2018-05-04）
- ^ de Raadt, Theo. . openbsd-tech (邮件列表). 2010-12-14 [2014-05-24]. （原始内容存档于2020-12-25）.
- ^ Holwerda, Thom, , OSNews, 2010-12-14 [2011-12-13], （原始内容存档于2014-03-14）
- ^ Ryan, Paul, , Ars Technica (Condé Nast Digital), 2010-12-23 [2011-01-09], （原始内容存档于2014-03-14）
- ^ , Internet Security Systems Security Advisory (Internet Security Systems), 2002-06-26 [2011-12-13], （原始内容存档于2012-09-08）
- ^ , Internet Security Systems, [2011-12-13], （原始内容存档于2012-01-06）
- ^ , Core Security Technologies – CoreLabs Advisory (Core Security Technologies), 2007-03-13 [2011-12-13], （原始内容存档于2014-03-14）
- ^ Brindle, Joshua, , Security Blog, 2008-03-30 [2011-12-13], （原始内容存档于2014-03-14）
- ^ , OpenBSD, [2011-12-13], （原始内容存档于2014-03-14）, Secure by Default
- ^ Wheeler, David A., , , 2003-03-03 [2011-12-13], （原始内容存档于2020-12-08）
- ^ , OpenBSD, [2011-12-13], （原始内容存档于2014-03-14）
- ^ , OpenBSD, [2011-12-13], （原始内容存档于2014-03-14）
- ^ , OpenBSD, [2011-12-13], （原始内容存档于2011-12-19）, The proceeds from sale of these products is the primary funding of the OpenBSD project.
- ^ , OpenBSD FAQ, [2011-12-13], （原始内容存档于2014-12-22）
- ^ , OpenBSD FAQ, [2011-12-13], （原始内容存档于2020-08-09）
- ^ 但事实上，河豚并没有这样的刺。从图像来看，Puffy更接近于类似的品种二齿鲀。
- ^ Matzan, Jem, , Software In Review, 2006-12-01 [2011-12-13], （原始内容存档于2020-12-10）, Each OpenBSD release has a graphical theme and a song that goes with it. The theme reflects a major concern that the OpenBSD programmers are addressing or bringing to light.
- ^ . The OpenBSD Project. [2014-06-14]. （原始内容存档于2014-05-29）.
外部链接
| 维基共享资源中相关的多媒体资源：OpenBSD |
| 維基教科書中的相關電子：BSD/OpenBSD |
- 官方网站
- OpenBSD Journal
- 非官方OpenBSD ports追踪器（页面存档备份，存于）
- OpenBSD ports web-site based on the ports-readmes port
- OpenBSD源代码搜索（页面存档备份，存于）
- freenode上的#openbsd，或直接通过浏览器访问：https://web.archive.org/web/20140305111015/https://webchat.freenode.net/?channels=openbsd
视频
- Video - Exploit Mitigation Techniques: an Update After 10 Years（页面存档备份，存于）
- Video - An OpenBSD talk by Michael Lucas（页面存档备份，存于）
大型邮件列表
- 公告邮件列表（页面存档备份，存于）
- 安全公告邮件列表（页面存档备份，存于）
- Miscellaneous mailing list ( page archive backup , stored at)
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.