Re: CAN-2005-0001, CAN-2004-1235, CAN-2004-1137, CAN-2004-1016, Georgi Guninski security advisory #72, 2004, grsecurity 2.1.0 release

[Adrian von Bidder <avbidder@fortytwo.ch>]

On Thursday 13 January 2005 10.53, Jan Lühr wrote:

> Btw. AFAIK kernel.org  recommend not using their kernels, because they
> give no security support.

kernel.org (or rather, the people on lkml) doesn't know where it's head, 
hands and feet are relative to each other.  They're a bunch of individuals 
with very, very widely different opinions on how things should be handled.

Browse the kernel-traffic newsletter or the lkml archives, there's a debate 
over how releases and security should be handled about every other week.  
There's a debate right now about creating an official security contact for 
the kernel, I really hope that this will get somewhere, but don't hold your 
breath until it can actually be seen to work.

 <http://lkml.org/lkml/2005/1/12/138>
 <http://lkml.org/lkml/2005/1/12/191>
 <http://lkml.org/lkml/2005/1/2/64>

-- vbi

-- 
Beware of the FUD - know your enemies. This week
    * The Alexis de Toqueville Institue *
http://fortytwo.ch/opinion/adti

Attachment: pgpun8i1sgplS.pgp
Description: PGP signature