[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: root compromise on debian woody



I am a newbie to Debian, a Slackware convert, but not a newbie otherwise. I compile my own kernels since I use a set of kernel patches to support speech synthesizer to the console, called "speakup". A precompiled kernel for 2.4.27 package got me started with an installation disk, but I quickly got me a 2.6.11 source package, patched it for speech access, installed it on Sarge, and then went on a binge adding stuff to my system, like a kid in a candy store.

I recently read the FAQ by the guy at Cornell (forgive me for not looking up your name) and was persuaded that it made sense for me to move on over to unstable rather than following Sarge to stable or staying with testing, and as I posted here, that upgrade went smooth as silk. But now I see I have put myself beyond the reach of the Debian security team, without a graceful way to go back.

Oh well. I will just have to live on the edge and keep an eye out for problems. (okay, an ear!)

Chuck

On Fri, 27 May 2005, Robert Vangel wrote:

Roberto C. Sanchez wrote:


As long as you make a concious decision to do this.  Unfortunately, many
people go out and grab some package from the upstream site and then
think that the security updates will roll in along with all the other
apt-get stuff.  They won't, but then you understand that.  Personally, I
roll my own kernel, but I choose the Debian kernel-source-* packages for
that.  Then I don't need to remember to personally keep such close track
of the security vulnerabilities.  I still track them, but I realize that
when fixes become available, I will see them in the new kernel-source
packages that come down.

-Roberto


I had considered doing this, but decided there are still things in the kernel-source package that I am just not ever going to need and I would rather include *just* those that I require.

Btw, I use this procedure on machines like servers where I really need to make sure I know what's going on with them. On my desktop I just use Ubuntu's packages.


--
The Moon is Waning Gibbous (83% of Full)
But you can still get downloads from http://www.mhcable.com/~chuckh



Reply to: