Re: Strongest linux - kernel patches
On Jueves, 3 de Julio de 2003 03:18, Peter Cordes wrote:
> This is starting to get a bit off topic, and it was for the most part
> agreed in a recent thread about US foreign policy that this doesn't belong
> on deb-sec. Further discussion about politics, rather than specifically
> about selinux, should probably happen on a newgroup like alt.impeach.bush,
> for example.
You're right, I'll go on-topic now. Lots of thanks for your comment, if as you
say the code has been out there for some time and suspicious things haven't
been discovered, then I think I should take a look at it, cos maybe I'm
missing a good piece of software.
I am as well trying to build secure systems (what an ethereus term!). In my
case I wanted to try grsecurity but I think I won't be able to use it in a
good way unless I spend quite a lot of time reading their docs first. However
I'm right now coming to a problem that probably others face as well:
combining multiple kernel patches.
In our particular case, it's Linux 2.4.21 + grsecurity + XFS. It's been a
headache today, tomorrow I'll keep on trying to merge the two patches
together. BTW, we opted for XFS because of its ACL system, which allowed us
to obey the granular permissions of W2K clients when connecting to our Samba
servers (I mean that W2K can adjust the perms in a file of the Samba server,
to the same point that it can with a local file in a NTFS filesystem). Any
opinions on this?
Regards from Spain
Luis Gomez Miralles
InfoEmergencias - Technical Department
Phone (+34) 654 24 01 34
Fax (+34) 963 49 31 80
PGP Public Key available at http://www.infoemergencias.com/lgomez.asc