A list of all the great things that OpenBSD has. Why this site exists, see About.
- /etc/examples
- 64bit Time
- acme-client(1)
- afterboot(8)
- AnonCVS and open source repos
- Anti-ROP
- arc4random(3)
- ASLR
- Audio recording
- autoinstall(8)
- base system concept
- carp(4)
- Chrooted webserver by default
- Configuration syntax
- cron(8)
- cwm(1)
- Defined integer overflows
- doas(1)
- dump(8): incremental filesystem backups
- Eating your own dogfood
- FFS2: Enhanced Fast Filesystem
- file(1)
- freezero(3)
- Full Disk Encryption
- Hackathons
- httpd(8)
- KARL
- Kernel & Userland
- LibreSSL
- License
- Malloc leak detection
- mandoc(1)
- manpages
- Meltdown & Spectre
- Memory allocation randomization
- mg(1)
- Multiple platforms
- No *-dev packages
- noexec
- nsd(8)
- ntpd(8)
- OpenBGPD
- openrsync
- OpenSMTPD
- OpenSSH
- perl(1)
- pf(4)
- PID randomization
- PIE
- ping(8) randomness
- pledge(2)
- Privilege Separation
- Random MAC addresses in ifconfig(8)
- rcctl(8)
- rdist(1)
- recallocarray(3)
- relayd(8)
- Reliable release model
- Retpoline
- rpki-client(8)
- Sane & secure defaults
- securelevel(7)
- sensorsd(8)
- signify(1)
- slowcgi(8)
- spamd(8)
- Stack
- stack-register checking
- strlcpy(3), strlcat(3)
- Swap Encryption
- Syscall From-Verification
- sysmerge(8)
- syspatch(8)
- sysupgrade(8)
- tmux(1)
- unveil(2)
- unwind(8)
- UTF-8 only
- vmd(8)
- vxlan(4)
- W^X Memory
- WireGuard
- xenodm: the secure X Display manager
- Xserver without root permissions