New unveil(2) system call to restrict file system access of the calling process to the specified files and directories. It is most powerful when properly …

OpenBSD has attracted a critical mass of developers, support organizations and consultants such that it is now safe to commit to using OpenBSD in your pro…

OpenBSD believes in strong security. Our aspiration is to be NUMBER ONE in the industry for security (if we are not already there). Our open software deve…

Copyright law is complex, OpenBSD policy is simple — OpenBSD strives to provide code that can be freely used, copied, modified, and distributed by anyone …

dc is an arbitrary precision arithmetic package. The overall structure of dc is a stacking (reverse Polish) calculator i.e. numbers are stored on a stack.…

bc is an interactive processor for a language which resembles C but provides unlimited precision arithmetic. It takes input from any expressions on the co…

ssh (SSH client) is a program for logging into a remote machine and for executing commands on a remote machine. It is intended to provide secure encrypted…

Default BIOS boot image. The BIOS is an external firmware file that is distributed separately due to an incompatible license. A prepackaged version of the…

The dd utility copies the standard input to the standard output, applying any specified conversions. Input data is read and written in 512-byte blocks. If…

Packet filtering takes place in the kernel. A pseudo-device, /dev/pf , allows userland processes to control the behavior of the packet filter through an i…

CVS is a version control system, which allows you to keep old versions of files (usually source code), keep a log of who, when, and why changes occurred, …

tells tic to retain commented-out capabilities rather than discarding them. Capabilities are commented by prefixing them with a period. This sets the -x o…

The virtual file system, VFS , is the kernel interface to file systems. The interface specifies the calls for the kernel to access file systems. It also s…

time executes and times utility . After the utility finishes, time writes the total time elapsed, the time consumed by system overhead, and the time used …

Formally, the corporation's objects are to support and further the development, advancement, and maintenance of free software based on the OpenBSD operati…

spamd is a fake mail daemon which rejects false mail. It is designed to be very efficient so that it does not slow down the receiving machine. spamd consi…

Use the specified host instead of the default NIC (whois.crsnic.net). Either a host name or an IP address may be specified. By default whois constructs th…

sshd (OpenSSH Daemon) is the daemon program for ssh(1) . It provides secure encrypted communications between two untrusted hosts over an insecure network.…

sftp is a file transfer program, similar to ftp(1) , which performs all operations over an encrypted ssh(1) transport. It may also use many features of ss…

Remove most local symbols from the output. Different file formats may limit this to a subset of the local symbols. For example, file and section symbols …

A linker takes one or more object, archive, and library files, and combines them into an output file (an executable, a shared library, or another object f…

OSPF is an interior gateway protocol designed to supersede RIP. It has several advantages over RIP. For instance, every router has an understanding of the…

The getopt () function incrementally parses a command line argument list argv and returns the next known option character. An option character is known if…

pkg_add checks that its signature is valid and that the signature was emitted by a valid signing key, as stored in /etc/signify/*-pkg.pub , pkg_add verifi…

relayd is a daemon to relay and dynamically redirect incoming connections to a target host. Its main purposes are to run as a load-balancer, application l…

The first call to unveil () that specifies a path removes visibility of the entire filesystem from all other filesystem-related system calls (such as open…

unwind is a validating DNS resolver. It is intended to run on client machines like workstations or laptops and only listens on localhost. unwind sends DNS…

slaacd is a stateless address autoconfiguration (SLAAC) daemon for clients. It listens for IPv6 router advertisement messages, for example those sent by r…

The standard functions malloc(), calloc(), and realloc() allocate objects, regions of memory to store values. The malloc() function allocates uninitializ…

If waitid () found a matching process, the structure referenced by infop is filled with the status of the process: si_signo is set to SIGCHLD , and si_pid…

resolvd handles the contents of /etc/resolv.conf , which contains details of the system's DNS nameservers, and is read by the resolver routines in the C l…

Before running newfs , the disk must be labeled using disklabel(8) . newfs builds a file system on the specified special device, basing its defaults on th…

The disklabel utility can be used to install, examine, or modify the label on a disk drive or pack. The disk label contains information about disk charact…

ssh-agent is a program to hold private keys used for public key authentication. Through use of environment variables the agent can be located and automati…

Normally this program generates the key and asks for a file in which to store the private key. The public key is stored in a file with the same name but “…

Within the sections, a host address can be specified by IPv4 address, IPv6 address, interface name, interface group, or DNS hostname. If the address is an…

dhcpleased is a dynamic host configuration protocol (DHCP) daemon for clients. It requests IP configuration information from for example those offered by …

The mimmutable () system call changes currently mapped pages in the region to be marked immutable, which means their protection or mapping may not be chan…

Specifies what environment variables sent by the client will be copied into the session's environ(7) . See SendEnv and SetEnv in ssh_config(5) for how to …

The resolv.conf file specifies how the resolver routines in the C library (which provide access to the Internet Domain Name System) should operate. The re…

acme-client is an Automatic Certificate Management Environment (ACME) client: it looks in its configuration for a domain section corresponding to the hand…

New unveil(2) system call to restrict file system access of the calling process to the specified files and directories. It is most powerful when properly …

OpenBSD has attracted a critical mass of developers, support organizations and consultants such that it is now safe to commit to using OpenBSD in your pro…

OpenBSD believes in strong security. Our aspiration is to be NUMBER ONE in the industry for security (if we are not already there). Our open software deve…

Copyright law is complex, OpenBSD policy is simple — OpenBSD strives to provide code that can be freely used, copied, modified, and distributed by anyone …

dc is an arbitrary precision arithmetic package. The overall structure of dc is a stacking (reverse Polish) calculator i.e. numbers are stored on a stack.…

bc is an interactive processor for a language which resembles C but provides unlimited precision arithmetic. It takes input from any expressions on the co…

ssh (SSH client) is a program for logging into a remote machine and for executing commands on a remote machine. It is intended to provide secure encrypted…

Default BIOS boot image. The BIOS is an external firmware file that is distributed separately due to an incompatible license. A prepackaged version of the…

The dd utility copies the standard input to the standard output, applying any specified conversions. Input data is read and written in 512-byte blocks. If…

Packet filtering takes place in the kernel. A pseudo-device, /dev/pf , allows userland processes to control the behavior of the packet filter through an i…

CVS is a version control system, which allows you to keep old versions of files (usually source code), keep a log of who, when, and why changes occurred, …

tells tic to retain commented-out capabilities rather than discarding them. Capabilities are commented by prefixing them with a period. This sets the -x o…

The virtual file system, VFS , is the kernel interface to file systems. The interface specifies the calls for the kernel to access file systems. It also s…

time executes and times utility . After the utility finishes, time writes the total time elapsed, the time consumed by system overhead, and the time used …

Formally, the corporation's objects are to support and further the development, advancement, and maintenance of free software based on the OpenBSD operati…

spamd is a fake mail daemon which rejects false mail. It is designed to be very efficient so that it does not slow down the receiving machine. spamd consi…

Use the specified host instead of the default NIC (whois.crsnic.net). Either a host name or an IP address may be specified. By default whois constructs th…

sshd (OpenSSH Daemon) is the daemon program for ssh(1) . It provides secure encrypted communications between two untrusted hosts over an insecure network.…

sftp is a file transfer program, similar to ftp(1) , which performs all operations over an encrypted ssh(1) transport. It may also use many features of ss…

Remove most local symbols from the output. Different file formats may limit this to a subset of the local symbols. For example, file and section symbols …

A linker takes one or more object, archive, and library files, and combines them into an output file (an executable, a shared library, or another object f…

OSPF is an interior gateway protocol designed to supersede RIP. It has several advantages over RIP. For instance, every router has an understanding of the…

The getopt () function incrementally parses a command line argument list argv and returns the next known option character. An option character is known if…

pkg_add checks that its signature is valid and that the signature was emitted by a valid signing key, as stored in /etc/signify/*-pkg.pub , pkg_add verifi…

relayd is a daemon to relay and dynamically redirect incoming connections to a target host. Its main purposes are to run as a load-balancer, application l…

The first call to unveil () that specifies a path removes visibility of the entire filesystem from all other filesystem-related system calls (such as open…

unwind is a validating DNS resolver. It is intended to run on client machines like workstations or laptops and only listens on localhost. unwind sends DNS…

slaacd is a stateless address autoconfiguration (SLAAC) daemon for clients. It listens for IPv6 router advertisement messages, for example those sent by r…

The standard functions malloc(), calloc(), and realloc() allocate objects, regions of memory to store values. The malloc() function allocates uninitializ…

If waitid () found a matching process, the structure referenced by infop is filled with the status of the process: si_signo is set to SIGCHLD , and si_pid…

resolvd handles the contents of /etc/resolv.conf , which contains details of the system's DNS nameservers, and is read by the resolver routines in the C l…

Before running newfs , the disk must be labeled using disklabel(8) . newfs builds a file system on the specified special device, basing its defaults on th…

The disklabel utility can be used to install, examine, or modify the label on a disk drive or pack. The disk label contains information about disk charact…

ssh-agent is a program to hold private keys used for public key authentication. Through use of environment variables the agent can be located and automati…

Normally this program generates the key and asks for a file in which to store the private key. The public key is stored in a file with the same name but “…

Within the sections, a host address can be specified by IPv4 address, IPv6 address, interface name, interface group, or DNS hostname. If the address is an…

dhcpleased is a dynamic host configuration protocol (DHCP) daemon for clients. It requests IP configuration information from for example those offered by …

The mimmutable () system call changes currently mapped pages in the region to be marked immutable, which means their protection or mapping may not be chan…

Specifies what environment variables sent by the client will be copied into the session's environ(7) . See SendEnv and SetEnv in ssh_config(5) for how to …

The resolv.conf file specifies how the resolver routines in the C library (which provide access to the Internet Domain Name System) should operate. The re…

acme-client is an Automatic Certificate Management Environment (ACME) client: it looks in its configuration for a domain section corresponding to the hand…