Oded Arbel wrote:
> About Mandrake's "Secure" kernel - with 2.4, Mandrake no longer has a
> "secure kernel package". my assumption was that simply most (or all) of
> Mandrake's secure patches features already exist in 2.4, and hence no
> need for a specially secure kernel. is that correct or BS ?
It's wrong.
Usually, security improvements are based on R&D of some companies, such
as OpenWall.
However, most of these companies don't like 2.4, and refer to it as an
unstable series.
OpenWall, for example, clarified that it didn't have any intention to
port its patches (currently, for 2.2.19) to the 2.4 soon.
Mandrake, basing on these companies, could not make a 2.4 port of "its"
secure kernel.
Fortunately, there is one company that exploited this virgin niche, and
developed a collection of these patches, but for 2.4.* rather than 2.2.*.
The company is: Getrewted.
The package is called grsecurity.
Version 1.0 is announced this week (for 2.4.4).
For more details:
http://www.getrewted.net/
Now, the only question that remains (Nir?):
Where can one find 2.4.4 with Mandrake improvements?
The kernel which comes with Mandrake 8.0 is 2.4.3, and if you take the
standard Linus kernel 2.4.4, you give up Mandrake improvements....
--
Eli Marmor
[EMAIL PROTECTED]
CTO, Founder
Netmask (El-Mar) Internet Technologies Ltd.
__________________________________________________________
Tel.: +972-9-766-1020 8 Yad-Harutzim St.
Fax.: +972-9-766-1314 P.O.B. 7004
Mobile: +972-50-23-7338 Kfar-Saba 44641, Israel
=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
