On the subject of OpenBSD's approach to security, check this out: http://allthatiswrong.wordpress.com/2010/01/20/the-insecurit...
The title is a little provocative, but the article is really worth it.
The title is a little provocative, but the article is really worth it.
It is however a real critique of OpenBSD's security model that they haven't pursued enhanced access control (Niels had to bolt it on with Systrace because Theo doesn't agree with the concept).