Re: Dependancy info for libc12

2002-10-30 Thread Joel Baker
On Wed, Oct 30, 2002 at 10:25:51PM +1100, matthew green wrote: > >Indeed, some investigations with nm and perl show that basically all of the >core (libc12) libraries depend on libc for some set of their functions. > >The only odd bits are libutil (which depends on libposix for

Re: status debian/openbsd

2002-10-30 Thread Pavel Cahyna
[ please Cc: me in reply ] > > i do not know if netbsd is affected, but then they have other > goals with their debian port, not primary security. > > one problem that was found is about the fd handling. I am not > aware of any advisory either. Do you mean problems found by Alexander Viro in Jun

re: status debian/openbsd

2002-10-30 Thread matthew green
OpenBSD appears to be more heavily audited though. Maybe it's just appearance. You may have seen in the Debian Weekly News that I'm working on a rough audit project and in such I would like to say that security must include a heavy code audit. i think 'appears' is a great word her

re: Dependancy info for libc12

2002-10-30 Thread matthew green
Indeed, some investigations with nm and perl show that basically all of the core (libc12) libraries depend on libc for some set of their functions. The only odd bits are libutil (which depends on libposix for chown, easy enough to link) and libc, which has the undefined symbols

Re: status debian/openbsd

2002-10-30 Thread Andreas Schuldei
* Michael Goetze ([EMAIL PROTECTED]) [021030 10:11]: > > > The value of an OpenBSD port extends beyond the potential security > > benefits. Making packages portable across kernels is very valuable. I > > would like to be able to go into any OS and run a Debian system. > > The point is that, as fa

Re: status debian/openbsd

2002-10-30 Thread Michael Goetze
> The value of an OpenBSD port extends beyond the potential security > benefits. Making packages portable across kernels is very valuable. I > would like to be able to go into any OS and run a Debian system. The point is that, as far as I understood things, Andreas' Debian/OpenBSD was not about p

Re: status debian/openbsd

2002-10-30 Thread Drew Scott Daniels
Andreas Schuldei <[EMAIL PROTECTED]> said: > My point was that there was not so much to win securitywise with this port. OpenBSD appears to be more heavily audited though. Maybe it's just appearance. You may have seen in the Debian Weekly News that I'm working on a rough audit project and in such