Re: [gentoo-hardened] Security updates

2010-01-22 Thread Michael Orlitzky
Machell, Jonathan wrote: Hello there, We're currently trialling Gentoo to possibly host some of our web-servers. I've used Gentoo for over eight years so I'm leading these trials. I've subscribed to this mailing list but also gentoo-server and gentoo-security. I'm trying to keep up to speed w

Re: [gentoo-hardened] Security updates

2010-01-21 Thread Jonny Kent
As well as all the good suggestions others have made, consider using a cron job to run a glsa check daily after updating portage. # glsa-check -t all That will email you indications of security issues specifically affecting your systems as configured. On Thu, Jan 21, 2010 at 4:19 AM, Machell, Jo

Re: [gentoo-hardened] Security updates

2010-01-21 Thread Andri Möll
On Thu, 2010-01-21 at 12:19 +, Machell, Jonathan wrote: > I'm trying to keep up to speed with all the latest security news > affecting Gentoo, GNU/Linux, Apache and MySQL. Should subscription to > these mailing lists be sufficient for this or is there any other place > where I should be looking

Re: [gentoo-hardened] Security updates

2010-01-21 Thread Claes Gyllenswärd
2010/1/21 Machell, Jonathan : > Hello there, > > We're currently trialling Gentoo to possibly host some of our web-servers. > I've used Gentoo for over eight years so I'm leading these trials. > > I've subscribed to this mailing list but also gentoo-server and > gentoo-security. I'm trying to kee

Re: [gentoo-hardened] Security updates

2010-01-21 Thread Kerin Millar
2010/1/21 Machell, Jonathan : > Hello there, Hello. > I've subscribed to this mailing list but also gentoo-server and > gentoo-security. I'm trying to keep up to speed with all the latest security > news affecting Gentoo, GNU/Linux, Apache and MySQL. Should subscription to > these mailing list

Re: [gentoo-hardened] Security updates

2010-01-21 Thread klondike
2010/1/21 Machell, Jonathan : Hello there, We're currently trialling Gentoo to possibly host some of our web-servers. I've used Gentoo for over eight years so I'm leading these trials. I've subscribed to this mailing list but also gentoo-server and gentoo-security. I'm trying to keep up to sp

RE: [gentoo-hardened] Security updates

2010-01-21 Thread Machell, Jonathan
gentoo-hardened@lists.gentoo.org Subject: Re: [gentoo-hardened] Security updates On Thu, Jan 21, 2010 at 05:19, Machell, Jonathan wrote: > I'm aware that this and the other two mailing lists are low traffic but I > haven't heard a peep since subscribing on Tuesday. Is that normal? Quit

Re: [gentoo-hardened] Security updates

2010-01-21 Thread RB
On Thu, Jan 21, 2010 at 05:19, Machell, Jonathan wrote: > I'm aware that this and the other two mailing lists are low traffic but I > haven't heard a peep since subscribing on Tuesday. Is that normal? Quite. If you want chatter, hit the #gentoo-hardened IRC channel. > I was hoping to go through

Re: [gentoo-hardened] security updates

2007-02-11 Thread Kevin F. Quinn
On Sat, 10 Feb 2007 17:02:38 +0100 Nagy Gabor Peter <[EMAIL PROTECTED]> wrote: > Hi list, > > I have a question: > > Since I am new to gentoo, I don't know how security updates work. > > I know Debian. In Debian if I have stable installed on a production > server, I get regular security fixes,

Re: [gentoo-hardened] security updates

2007-02-10 Thread Andrew Ross
Nagy Gabor Peter wrote: > where can I check the differences (Changelog) between two gentoo > versions (like r3 and r4)? If you already have the package installed, you can use emerge's --changelog argument. From man emerge: "--changelog (-l) Use this in conjunction with the --pretend option. Thi

Re: [gentoo-hardened] security updates

2007-02-10 Thread Jean-Pierre Schwickerath
Hi, > I see now that glibc 2.4-r3 should be upgraded to 2.4-r4 (by the way, > where can I check the differences (Changelog) between two gentoo > versions (like r3 and r4)?) Check the -l flag when using emerge. For instance: emerge -plavuD world > So my question: If someone finds a bug in glib

Re: [gentoo-hardened] security updates

2007-02-10 Thread John Schember
On Sat, 2007-02-10 at 17:02 +0100, Nagy Gabor Peter wrote: > Hi list, > > I have a question: I think you had more than a single question... But the list is here to get help so the more questions the merrier ;-). > Since I am new to gentoo, I don't know how security updates work. GLSA is what you'

Re: [gentoo-hardened] security updates

2007-02-10 Thread Tom Hendrikx
Nagy Gabor Peter wrote: > Hi list, > > I have a question: > > Since I am new to gentoo, I don't know how security updates work. > > I know Debian. In Debian if I have stable installed on a production > server, I get regular security fixes, often backported from the current > bleeding edge vers