Re: status debian/openbsd

2002-10-30 Thread Pavel Cahyna
[ please Cc: me in reply ] > > i do not know if netbsd is affected, but then they have other > goals with their debian port, not primary security. > > one problem that was found is about the fd handling. I am not > aware of any advisory either. Do you mean problems found by Alexander Viro in Jun

re: status debian/openbsd

2002-10-30 Thread matthew green
OpenBSD appears to be more heavily audited though. Maybe it's just appearance. You may have seen in the Debian Weekly News that I'm working on a rough audit project and in such I would like to say that security must include a heavy code audit. i think 'appears' is a great word her

Re: status debian/openbsd

2002-10-30 Thread Andreas Schuldei
* Michael Goetze ([EMAIL PROTECTED]) [021030 10:11]: > > > The value of an OpenBSD port extends beyond the potential security > > benefits. Making packages portable across kernels is very valuable. I > > would like to be able to go into any OS and run a Debian system. > > The point is that, as fa

Re: status debian/openbsd

2002-10-30 Thread Michael Goetze
> The value of an OpenBSD port extends beyond the potential security > benefits. Making packages portable across kernels is very valuable. I > would like to be able to go into any OS and run a Debian system. The point is that, as far as I understood things, Andreas' Debian/OpenBSD was not about p

Re: status debian/openbsd

2002-10-30 Thread Drew Scott Daniels
Andreas Schuldei <[EMAIL PROTECTED]> said: > My point was that there was not so much to win securitywise with this port. OpenBSD appears to be more heavily audited though. Maybe it's just appearance. You may have seen in the Debian Weekly News that I'm working on a rough audit project and in such

Re: status debian/openbsd

2002-10-29 Thread Pavel Cahyna
Hello, [ please Cc: me, I'm not subscribed to this list ] [ Note: I'm cutting and pasting from the lists' archive ] > The kernel code seems to have severe race conditions and the > userspace seems to be bitten by a compareable number of security > incidents as e.g. a stabel debian with a correspo

Re: status debian/openbsd

2002-10-22 Thread Andreas Schuldei
* Andreas Schuldei ([EMAIL PROTECTED]) [021022 23:58]: > There are several indications that openbsd's security is more or > less up to the level what can be achived with todays debian > gnu/linux. > > The kernel code seems to have severe race conditions and the > userspace seems to be bitten by a

status debian/openbsd

2002-10-22 Thread Andreas Schuldei
There are several indications that openbsd's security is more or less up to the level what can be achived with todays debian gnu/linux. The kernel code seems to have severe race conditions and the userspace seems to be bitten by a compareable number of security incidents as e.g. a stabel debian wi