Re: Strongest linux - kernel patches

2003-07-07 Thread Michelle Konzack
Am 02:55 2003-07-03 +0200 hat Luis Gomez - InfoEmergencias geschrieben: > >On Miércoles, 2 de Julio de 2003 15:05, Preben Randhol wrote: >> What about: http://www.nsa.gov/selinux/ ? > >For the sake of God, how in hell can we associate "nsa.gov" with "secure"? > >Excuse me if I'm bullshitting, but I

Re: Strongest linux - kernel patches

2003-07-07 Thread Michelle Konzack
Am 02:55 2003-07-03 +0200 hat Luis Gomez - InfoEmergencias geschrieben: > >On Miércoles, 2 de Julio de 2003 15:05, Preben Randhol wrote: >> What about: http://www.nsa.gov/selinux/ ? > >For the sake of God, how in hell can we associate "nsa.gov" with "secure"? > >Excuse me if I'm bullshitting, but I

Re: Strongest linux - kernel patches

2003-07-06 Thread Luis Gomez - InfoEmergencias
Hi On Jueves, 3 de Julio de 2003 04:28, Hubert Chan wrote: > > "Peter" == Peter Cordes <[EMAIL PROTECTED]> writes: > Peter> Luckily, that's a solved problem. Con Kolivas's -ck3 patch for > Peter> 2.4.21 includes grsecurity and XFS. > > There's also wolk, which contains grsecurity, XFS, and a

Re: Strongest linux - kernel patches

2003-07-06 Thread Luis Gomez - InfoEmergencias
Hi On Jueves, 3 de Julio de 2003 04:28, Hubert Chan wrote: > > "Peter" == Peter Cordes <[EMAIL PROTECTED]> writes: > Peter> Luckily, that's a solved problem. Con Kolivas's -ck3 patch for > Peter> 2.4.21 includes grsecurity and XFS. > > There's also wolk, which contains grsecurity, XFS, and a

Re: Strongest linux - kernel patches

2003-07-03 Thread Peter Cordes
On Thu, Jul 03, 2003 at 07:43:23PM +0200, Ulrich Scholler wrote: > During the reign of 2.4.19, I've had problems with kswapd dying after a > few days of uptime when I used the -ck patches. Is this still the case? > I'll let you know in a few days... root 4 0.0 0.0 00 ?

Re: Strongest linux - kernel patches

2003-07-03 Thread Peter Cordes
On Thu, Jul 03, 2003 at 07:43:23PM +0200, Ulrich Scholler wrote: > During the reign of 2.4.19, I've had problems with kswapd dying after a > few days of uptime when I used the -ck patches. Is this still the case? > I'll let you know in a few days... root 4 0.0 0.0 00 ?

Re: Strongest linux - kernel patches

2003-07-03 Thread Luis Gomez - InfoEmergencias
Oh men, I didn't pay attention to the thread for all the day. Thank you VERY much!!! I'll be taking a look at them ASAP. Thanks ppl!!! Pope On Jueves, 3 de Julio de 2003 04:28, Hubert Chan wrote: > > "Peter" == Peter Cordes <[EMAIL PROTECTED]> writes: > > [...] > > Peter> Luckily,

Re: Strongest linux - kernel patches

2003-07-03 Thread Luis Gomez - InfoEmergencias
Oh men, I didn't pay attention to the thread for all the day. Thank you VERY much!!! I'll be taking a look at them ASAP. Thanks ppl!!! Pope On Jueves, 3 de Julio de 2003 04:28, Hubert Chan wrote: > > "Peter" == Peter Cordes <[EMAIL PROTECTED]> writes: > > [...] > > Peter> Luckily,

Re: Strongest linux - kernel patches

2003-07-03 Thread Ulrich Scholler
Hi, On Wed Jul 02, 2003 at 22:50:20 -0300, Peter Cordes wrote: > Luckily, that's a solved problem. Con Kolivas's -ck3 patch for 2.4.21 > includes grsecurity and XFS. (I didn't mention it before because I didn't > realize it was significant. (I'm not using ACLs).) Con's webpage is > http://memb

Re: Strongest linux - kernel patches

2003-07-03 Thread Ulrich Scholler
Hi, On Wed Jul 02, 2003 at 22:50:20 -0300, Peter Cordes wrote: > Luckily, that's a solved problem. Con Kolivas's -ck3 patch for 2.4.21 > includes grsecurity and XFS. (I didn't mention it before because I didn't > realize it was significant. (I'm not using ACLs).) Con's webpage is > http://memb

Re: Strongest linux - kernel patches

2003-07-03 Thread Hubert Chan
> "Peter" == Peter Cordes <[EMAIL PROTECTED]> writes: [...] Peter> Luckily, that's a solved problem. Con Kolivas's -ck3 patch for Peter> 2.4.21 includes grsecurity and XFS. There's also wolk, which contains grsecurity, XFS, and a ton of other patches. http://sourceforge.net/projects/wolk

Re: Strongest linux - kernel patches

2003-07-03 Thread Hubert Chan
> "Peter" == Peter Cordes <[EMAIL PROTECTED]> writes: [...] Peter> Luckily, that's a solved problem. Con Kolivas's -ck3 patch for Peter> 2.4.21 includes grsecurity and XFS. There's also wolk, which contains grsecurity, XFS, and a ton of other patches. http://sourceforge.net/projects/wolk

Re: Strongest linux - kernel patches

2003-07-02 Thread Peter Cordes
On Thu, Jul 03, 2003 at 03:43:32AM +0200, Luis Gomez - InfoEmergencias wrote: > I am as well trying to build secure systems (what an ethereus term!). In my > case I wanted to try grsecurity but I think I won't be able to use it in a > good way unless I spend quite a lot of time reading their docs

Re: Strongest linux - kernel patches

2003-07-02 Thread Luis Gomez - InfoEmergencias
On Jueves, 3 de Julio de 2003 03:18, Peter Cordes wrote: (...) > This is starting to get a bit off topic, and it was for the most part > agreed in a recent thread about US foreign policy that this doesn't belong > on deb-sec. Further discussion about politics, rather than specifically > about sel

Re: Strongest linux - kernel patches

2003-07-02 Thread Peter Cordes
On Thu, Jul 03, 2003 at 02:55:53AM +0200, Luis Gomez - InfoEmergencias wrote: > On Mi?rcoles, 2 de Julio de 2003 15:05, Preben Randhol wrote: > > What about: http://www.nsa.gov/selinux/ ? > > For the sake of God, how in hell can we associate "nsa.gov" with "secure"? > > Excuse me if I'm bullshitt

Re: Strongest linux - secure distro

2003-07-02 Thread Alvin Oga
On Wed, 2 Jul 2003, Preben Randhol wrote: > Alvin Oga <[EMAIL PROTECTED]> wrote on 02/07/2003 (12:46) : > > rest of the kernel hardening patches > > > > http://linux-sec.net/Harden/kernel.gwif.html > > What about: http://www.nsa.gov/selinux/ ? that's listed in the list of secure linux distros

Re: Strongest linux - kernel patches

2003-07-02 Thread Luis Gomez - InfoEmergencias
On Miércoles, 2 de Julio de 2003 15:05, Preben Randhol wrote: > What about: http://www.nsa.gov/selinux/ ? For the sake of God, how in hell can we associate "nsa.gov" with "secure"? Excuse me if I'm bullshitting, but I understand that those people who refuse to export strong criptography unless i

Re: Strongest linux - kernel patches

2003-07-02 Thread Adam ENDRODI
On Wed, Jul 02, 2003 at 01:17:22PM +0200, Thomas Sjögren wrote: > > > -- than use the latest php, apache, postfix, mysql, dns > > - probably want to chroot your dns app > > ... and don't forget to build the packages with your SSP patched GCC :) I doubt if SSP provides additional security bey

Re: Strongest linux - kernel patches

2003-07-02 Thread Peter Cordes
On Thu, Jul 03, 2003 at 03:43:32AM +0200, Luis Gomez - InfoEmergencias wrote: > I am as well trying to build secure systems (what an ethereus term!). In my > case I wanted to try grsecurity but I think I won't be able to use it in a > good way unless I spend quite a lot of time reading their docs

Re: Strongest linux - kernel patches

2003-07-02 Thread Luis Gomez - InfoEmergencias
On Jueves, 3 de Julio de 2003 03:18, Peter Cordes wrote: (...) > This is starting to get a bit off topic, and it was for the most part > agreed in a recent thread about US foreign policy that this doesn't belong > on deb-sec. Further discussion about politics, rather than specifically > about sel

Re: Strongest linux

2003-07-02 Thread Felix Cuello
On Wed, Jul 02, 2003 at 03:05:33PM +0200, Preben Randhol wrote: > What about: http://www.nsa.gov/selinux/ ? Is selinux a really secure OS. I mean, is this linux conforming security standars like FIPS 140-2? Thank you, Felix

Re: Strongest linux - kernel patches

2003-07-02 Thread Peter Cordes
On Thu, Jul 03, 2003 at 02:55:53AM +0200, Luis Gomez - InfoEmergencias wrote: > On Mi?rcoles, 2 de Julio de 2003 15:05, Preben Randhol wrote: > > What about: http://www.nsa.gov/selinux/ ? > > For the sake of God, how in hell can we associate "nsa.gov" with "secure"? > > Excuse me if I'm bullshitt

Re: Strongest linux - secure distro

2003-07-02 Thread Alvin Oga
On Wed, 2 Jul 2003, Preben Randhol wrote: > Alvin Oga <[EMAIL PROTECTED]> wrote on 02/07/2003 (12:46) : > > rest of the kernel hardening patches > > > > http://linux-sec.net/Harden/kernel.gwif.html > > What about: http://www.nsa.gov/selinux/ ? that's listed in the list of secure linux distros

Re: Strongest linux - kernel patches

2003-07-02 Thread Luis Gomez - InfoEmergencias
On Miércoles, 2 de Julio de 2003 15:05, Preben Randhol wrote: > What about: http://www.nsa.gov/selinux/ ? For the sake of God, how in hell can we associate "nsa.gov" with "secure"? Excuse me if I'm bullshitting, but I understand that those people who refuse to export strong criptography unless i

Re: Strongest linux - kernel patches

2003-07-02 Thread Adam ENDRODI
On Wed, Jul 02, 2003 at 01:17:22PM +0200, Thomas Sjögren wrote: > > > -- than use the latest php, apache, postfix, mysql, dns > > - probably want to chroot your dns app > > ... and don't forget to build the packages with your SSP patched GCC :) I doubt if SSP provides additional security bey

Re: Strongest linux

2003-07-02 Thread Halil Demirezen
> Some of the options can break user-space software. To me, grsecurity patches are far more secure than any i know. While standard kernels are exploitable of ptrace-kmod, grsecurity pacthed kernel never let a local user to exploit the kernel. http://www.grsecurity.net

Re: Strongest linux

2003-07-02 Thread Felix Cuello
On Wed, Jul 02, 2003 at 03:05:33PM +0200, Preben Randhol wrote: > What about: http://www.nsa.gov/selinux/ ? Is selinux a really secure OS. I mean, is this linux conforming security standars like FIPS 140-2? Thank you, Felix -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsub

Re: Strongest linux

2003-07-02 Thread Peter Cordes
On Tue, Jul 01, 2003 at 02:36:37PM +0200, Javier Castillo Alcibar wrote: > Hi all, > > I want to setup a new linux server in internet (apache, php, postfix, > mysql, dns...), and I would like to patch the standard kernel with some > security patches. but my question is, what patches are the be

Re: Strongest linux

2003-07-02 Thread Halil Demirezen
> Some of the options can break user-space software. To me, grsecurity patches are far more secure than any i know. While standard kernels are exploitable of ptrace-kmod, grsecurity pacthed kernel never let a local user to exploit the kernel. http://www.grsecurity.net -- To

Re: Strongest linux

2003-07-02 Thread Peter Cordes
On Tue, Jul 01, 2003 at 02:36:37PM +0200, Javier Castillo Alcibar wrote: > Hi all, > > I want to setup a new linux server in internet (apache, php, postfix, > mysql, dns...), and I would like to patch the standard kernel with some > security patches. but my question is, what patches are the be

Re: Strongest linux - kernel patches

2003-07-02 Thread Preben Randhol
Alvin Oga <[EMAIL PROTECTED]> wrote on 02/07/2003 (12:46) : > rest of the kernel hardening patches > > http://linux-sec.net/Harden/kernel.gwif.html What about: http://www.nsa.gov/selinux/ ? -- Ada95 is good for you. http://www.crystalcode.com/codemage/MainMenu/Coding/Ada/IntroducingAda.php

Re: Strongest linux - kernel patches

2003-07-02 Thread Thomas Sjögren
Ugly reply, but here goes... On Tue, Jul 01, 2003 at 04:27:21PM -0700, Alvin Oga wrote: > > On Tue, 1 Jul 2003, valerian wrote: > > > On Tue, Jul 01, 2003 at 02:36:37PM +0200, Javier Castillo Alcibar wrote: > > > Hi all, > > > > > > I want to setup a new linux server in internet (apache, php, p

Re: Strongest linux - kernel patches

2003-07-02 Thread Preben Randhol
Alvin Oga <[EMAIL PROTECTED]> wrote on 02/07/2003 (12:46) : > rest of the kernel hardening patches > > http://linux-sec.net/Harden/kernel.gwif.html What about: http://www.nsa.gov/selinux/ ? -- Ada95 is good for you. http://www.crystalcode.com/codemage/MainMenu/Coding/Ada/IntroducingAda.php --

Re: Strongest linux - kernel patches

2003-07-02 Thread Thomas Sjögren
Ugly reply, but here goes... On Tue, Jul 01, 2003 at 04:27:21PM -0700, Alvin Oga wrote: > > On Tue, 1 Jul 2003, valerian wrote: > > > On Tue, Jul 01, 2003 at 02:36:37PM +0200, Javier Castillo Alcibar wrote: > > > Hi all, > > > > > > I want to setup a new linux server in internet (apache, php, p

Re: Strongest linux - kernel patches

2003-07-02 Thread Alvin Oga
On Tue, 1 Jul 2003, valerian wrote: > On Tue, Jul 01, 2003 at 02:36:37PM +0200, Javier Castillo Alcibar wrote: > > Hi all, > > > > I want to setup a new linux server in internet (apache, php, postfix, > > mysql, dns...), and I would like to patch the standard kernel with some > > security patche

Re: Strongest linux - kernel patches

2003-07-02 Thread Alvin Oga
On Tue, 1 Jul 2003, valerian wrote: > On Tue, Jul 01, 2003 at 02:36:37PM +0200, Javier Castillo Alcibar wrote: > > Hi all, > > > > I want to setup a new linux server in internet (apache, php, postfix, > > mysql, dns...), and I would like to patch the standard kernel with some > > security patche

Re: Strongest linux

2003-07-01 Thread valerian
On Tue, Jul 01, 2003 at 02:36:37PM +0200, Javier Castillo Alcibar wrote: > Hi all, > > I want to setup a new linux server in internet (apache, php, postfix, > mysql, dns...), and I would like to patch the standard kernel with some > security patches. but my question is, what patches are the be

Re: Strongest linux

2003-07-01 Thread valerian
On Tue, Jul 01, 2003 at 02:36:37PM +0200, Javier Castillo Alcibar wrote: > Hi all, > > I want to setup a new linux server in internet (apache, php, postfix, > mysql, dns...), and I would like to patch the standard kernel with some > security patches. but my question is, what patches are the be