Re: [DSA-403-1] Kernel update?

2003-12-06 Thread Karsten M. Self
on Wed, Dec 03, 2003 at 04:10:49PM -0500, David Z Maze ([EMAIL PROTECTED]) wrote: Bill Moseley [EMAIL PROTECTED] writes: So is the purpose of initrd to have a small kernel but be able to load whatever modules might be needed for the currently running hardware? Almost. You also get to

Re: [DSA-403-1] Kernel update?

2003-12-06 Thread Magnus von Koeller
On Saturday 06 December 2003 08:09, Karsten M. Self wrote: The _other_ advantage, though of a compile-in-what-you-need kernel is that you can then turn _off_ loadable module support.  For highly sensitive servers in hostile-facing environments, this can eliminate an entire class of potential

Re: [DSA-403-1] Kernel update?

2003-12-03 Thread David Z Maze
Harshwardhan Nagaonkar [EMAIL PROTECTED] writes: So, does this mean that I can compile my kernel without initrd, and it will still not break on debian? I understand that this will involve editing /etc/lilo.conf and getting rid of the initrd line. Any other gotchas that I should know about?

Re: [DSA-403-1] Kernel update?

2003-12-03 Thread Bill Moseley
On Wed, Dec 03, 2003 at 10:43:43AM -0500, David Z Maze wrote: Harshwardhan Nagaonkar [EMAIL PROTECTED] writes: So, does this mean that I can compile my kernel without initrd, and it will still not break on debian? I understand that this will involve editing /etc/lilo.conf and getting rid

Re: [DSA-403-1] Kernel update?

2003-12-03 Thread Benedict Verheyen
Bill Moseley wrote: So is the purpose of initrd to have a small kernel but be able to load whatever modules might be needed for the currently running hardware? If so I often wonder why that's needed -- that is, why not just build a kernel with everything compiled in? If, say, installing from

Re: [DSA-403-1] Kernel update?

2003-12-03 Thread David Z Maze
Bill Moseley [EMAIL PROTECTED] writes: On Wed, Dec 03, 2003 at 10:43:43AM -0500, David Z Maze wrote: Yes, that's right. The important thing is that you need to make sure the drivers for your root disk and filesystem (probably IDE disk and ext2, but these could both be other things) are

Re: [DSA-403-1] Kernel update?

2003-12-03 Thread Harshwardhan Nagaonkar
And thus we see that David Z Maze said, : Harshwardhan Nagaonkar [EMAIL PROTECTED] writes: So, does this mean that I can compile my kernel without initrd, and it will still not break on debian? I understand that this will involve editing /etc/lilo.conf and getting rid of the initrd line. Any other

Re: [DSA-403-1] Kernel update?

2003-12-02 Thread Bob Proulx
Bill Moseley wrote: Once again I'm not clear about a security posting. Wichert's post about the Debian hacked machines and the integer overflow in the Kernel talks about the 2.4.18 source package being updated. But my machines are all using the package: kernel-source-2.4.20 - Linux

Re: [DSA-403-1] Kernel update?

2003-12-02 Thread Harshwardhan Nagaonkar
And thus we see that Bob Proulx said, : Bill Moseley wrote: snip If you cannot wait then you would need to compile the 2.4.23 kernel yourself. That was released only three days ago and has not I'm trying to take this route of compiling the vanilla kernel myself. I've compiled the kernel many

Re: [DSA-403-1] Kernel update?

2003-12-02 Thread Harshwardhan Nagaonkar
And thus we see that Harshwardhan Nagaonkar said, : And thus we see that Bob Proulx said, : Bill Moseley wrote: snip If you cannot wait then you would need to compile the 2.4.23 kernel yourself. That was released only three days ago and has not snip I'm trying to take this route of compiling the

Re: [DSA-403-1] Kernel update?

2003-12-02 Thread Benedict Verheyen
Op wo 03-12-2003, om 01:18 schreef Harshwardhan Nagaonkar: So, does this mean that I can compile my kernel without initrd, and it will still not break on debian? Yes indeed. But make sure that if the initrd was using modules that were needed to get the system going, for instance lvm support,

Re: [DSA-403-1] Kernel update?

2003-12-02 Thread Harshwardhan Nagaonkar
And thus we see that Benedict Verheyen said, : Op wo 03-12-2003, om 01:18 schreef Harshwardhan Nagaonkar: snip Yes indeed. But make sure that if the initrd was using modules that were needed to get the system going, for instance lvm support, you will have to use a kernel with initrd support. Most

Re: [DSA-403-1] Kernel update?

2003-12-01 Thread J.H.M. Dassen (Ray)
On Mon, Dec 01, 2003 at 12:51:14 -0800, Bill Moseley wrote: Wichert's post about the Debian hacked machines and the integer overflow in the Kernel talks about the 2.4.18 source package being updated. But my machines are all using the package: kernel-source-2.4.20 - Linux kernel source for

Re: [DSA-403-1] Kernel update?

2003-12-01 Thread Bill Moseley
On Mon, Dec 01, 2003 at 10:44:15PM +0100, J.H.M. Dassen (Ray) wrote: On Mon, Dec 01, 2003 at 12:51:14 -0800, Bill Moseley wrote: Wichert's post about the Debian hacked machines and the integer overflow in the Kernel talks about the 2.4.18 source package being updated. But my machines are

Re: [DSA-403-1] Kernel update?

2003-12-01 Thread Scott C. Linnenbringer
On Mon, Dec 01, 2003, at 14:40 -0800, Bill Moseley wrote: And that was my previous question. Would 2.4.23 have *all* the Debian patches the kernel-source-2.4.20 refers to? Yes. This issue was fixed in the upstream 2.4.23 kernel, so compiling your own kernel from the stable vanilla sources