Kernel Security Update / Mondo Rescue kernel

[moseley@hank.org]

Sorry, but I'm still not clear.  I'm running stable, but I build my 
2.4.20 Kernels from kernel.org, and I apply the XFS patch from SGI's 
site.

The security announcement said:

 For the unstable distribution (sid) these problems are fixed in the
 2.4.20 series kernels based on Debian sources.

So, if I want 2.4.20 on my stable system would you recommend downloading
the 2.4.20-8 source from unstable (and kernel-patch-xfs 1.2pre4-1)
instead of using the kerenl.org sources?  Seems like that's the way to
go so I get all the patches listed in the kernel's README.Debian.gz.

Frankly, looking at the README.Debian.gz I'm not 100% clear that
2.4.20-8 addresses all the issues in DSA-311-1.  For example, I didn't 
see "ioperm" mentioned in the readme.

I'm asking this today because I want to use Mondo Rescue.  The Mondo 
docs say:

Q: When I try to boot from the Mondo CD, it says, "VFS: Unable to mount 
root fs." I am using a Debian distro. What do I do?

A: Ask Debian's designers why they, unlike every other distro I can 
find, have included cramfs and other 'goodies' with their kernel. In the 
meantime, please use '-k FAILSAFE' in your command line when calling 
Mondo.

Since I'm building the kernel from source can I just disable cramfs (and 
what else??) to avoid the need for the FAILSAFE kernel with Mondo?

I do a base install with the bf2.4-xfs CD, then I build my kernel from 
source using the bf2.4 config as a starting point and remove much of 
what I don't need.


-- 
Bill Moseley
moseley@hank.org