Subject: NetBSD Security FAQ : WIP
To: None <tech-security@netbsd.org>
From: Alan Horn <ahorn@inktomi.com>
List: tech-security
Date: 05/21/2000 14:06:08
  by mail.netbsd.org with SMTP; 21 May 2000 20:05:59 -0000
  by mail.inktomi.co.uk with SMTP; 21 May 2000 20:05:44 -0000
	by gilgamesh.inktomi.co.uk (8.9.3/8.9.3) with ESMTP id OAA02696
	for <tech-security@netbsd.org>; Sun, 21 May 2000 14:06:08 -0700 (PDT)
Date: Sun, 21 May 2000 14:06:08 -0700 (PDT)
From: Alan Horn <ahorn@inktomi.com>
To: tech-security@netbsd.org
Subject: NetBSD Security FAQ : WIP
Message-ID: <Pine.NEB.4.21.0005211319400.2655-200000@gilgamesh.inktomi.co.uk>
MIME-Version: 1.0
Content-Type: MULTIPART/MIXED; BOUNDARY="0-7678761-958943108=:2655"
Content-ID: <Pine.NEB.4.21.0005211405330.2689@gilgamesh.inktomi.co.uk>

  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.
  Send mail to mime@docserver.cac.washington.edu for more info.

--0-7678761-958943108=:2655
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII
Content-ID: <Pine.NEB.4.21.0005211405331.2689@gilgamesh.inktomi.co.uk>



A long long time ago... in a galaxy far far away... I made a commitment to
have a stab at producing a security FAQ for NetBSD.

For your amusement, I have included the current list of FAQs in the
FAQ.. no answers yet, that will come when y'all have had a chance to tell
me what questions I've missed out on :) (The answers are written by the
way, I just want to 'guide discussion' a bit ;)

Feedback welcomed..

Cheers,

Al


--0-7678761-958943108=:2655
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII; NAME=faq
Content-Transfer-Encoding: BASE64
Content-ID: <Pine.NEB.4.21.0005211405080.2655@gilgamesh.inktomi.co.uk>
Content-Description: NetBSD Security FAQ (proposed)
Content-Disposition: ATTACHMENT; FILENAME=faq
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--0-7678761-958943108=:2655--