[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: ReiserFS for NFS, Mandrake7.1, RH6.2, etc.



You wrote:


>Thank you all, Yosi, Tzafrir, Oleg, Ira, Chen, and Izar.

You're welcome.

>I wish I could use a distro ready with special security patches
>(maybe KRUD?).

Ohhh, but you can. I did not include this in my previous reply because I 
thought it is irrelevant to your question. There is actually a distribution 
that comes ready with special security patches called Immunix 
(http://www.immunix.org/). ImmunixOS is based on RedHat's
latest distribution. ImmunixOS is made of RedHat's rpms compiled with
Immunix's StackGuard utility that is supposed to add an additional
layer of protection against buffer overflows and the like. In the
future, Immunix promise to add support in the form of SubDomain and
CryptoMark (a TripWire clone?). I don't have any experience with this
distribution, but I will be more than interested to hear anyone who
does.

>However, Bastille is not relevant:
>
>1. There is no Bastille for 6.2, but only for 6.0/6.1.

Yes, you are right. Bastille only comes for RedHat 6.0 and 6.1
Too bad the Bastille developers cannot issue their version closer
to the date the new RedHat distribution is out.

>In addition, it is not easy to patch existing kernels with the
>secure-linux patches, because usually these kernels (especially RH
>and Mandrake) already contain many other patches, and are already
>different from the original Linus kernel. It is always better to
>get the kernel ready from the vendor, with all the patches already
>built-in, and the conflicts already resolved.

Yet another reason to have a look at Immunix.

Yosi

________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com


=================================================================
To unsubscribe, send mail to linux-il-request@linux.org.il with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail linux-il-request@linux.org.il