On Wed, May 22, 2002 at 01:07:32AM +1000, Anthony Towns wrote:
> And yes, I consider requiring Debian operating systems to have firewalling
> tools available to be in aid of that goal. That's not something new
> I've just thought up to be annoying to the Hurd people because it's the
> flamewar du jour. Last time this stuff came up was October 2000, and I
> brought it up then too:
> 
>   http://lists.debian.org/debian-hurd/2000/debian-hurd-200010/msg00239.html
> 
> But hey, let's have a go at an impeachment! We could make up a procedure
> for it and everything! It'll be fun!

Well, in that mail it sounded less like a dogma, but more like a general
discussion about system security.

FWIW, I have an idea how to expose the ipchains support in the existing code
so you could use it.  It would suck from a system design point of view, and
it would most certainly not be well tested or maintained, because the
network server is actually to be designed and written from scratch.  But if
that's what is required to get an otherwise completely functional system to
be rubber stamped by the release manager, I might just as well waste a day
or two on it, so that the other effort is saved.

I am prepared to talk about this again (if there is still a need) a couple
of weeks before the next freeze.  Before that, I will focus on the real
security issues we have (and there is at least one we definitely need to fix
before a release).

Thanks,
Marcus

-- 
`Rhubarb is no Egyptian god.' Debian http://www.debian.org [EMAIL PROTECTED]
Marcus Brinkmann              GNU    http://www.gnu.org    [EMAIL PROTECTED]
[EMAIL PROTECTED]
http://www.marcus-brinkmann.de


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


Reply via email to