On Fri Jun 06, 2003 at 02:44:34PM -0400, Bill Mullen wrote:

> >> A friend has a box with linux MDK 8.2 and prefers not to upgrade.
> >> Since MDK stopped (or is going to stop) support for that system, how
> >> could  he keep up with security upgrades?
> >> Should he abandon rpm and compile everything or should he use rpms
> >> available on the Internet?
> >
> > 8.2 is alive until September, IIRC.  At that point, he has a few
> > options:
> >
> > - do nothing
> > - grab 9.0 updates and try to build them for 8.2 (may or may not work,
> >   depending on the app)
> > - build the particular app from source and, as you say, abandon rpm
> >
> > It really depends on how much work he wants to do and how concerned he
> > is with security.
> 
> Isn't Mandrake's SNF distro based on 8.2? Perhaps the RPMs from that will
> suffice for the most security-critical apps (which are precisely the ones
> most likely to exist in both distros)?

MNF.  And yes.  But one should make sure they test stuff like that first...
MNF is slightly different in some respects from 8.2 so you may experience a
little oddness.  It also only contains about 30% of the packages from 8.2,
so there will be a lot of stuff that doesn't get updated because it doesn't
come with MNF.

-- 
MandrakeSoft Security; http://www.mandrakesecure.net/
Online Security Resource Book; http://linsec.ca/
"lynx -source http://linsec.ca/vdanen.asc | gpg --import"
{FE6F2AFD : 88D8 0D23 8D4B 3407 5BD7  66F9 2043 D0E5 FE6F 2AFD}

Attachment: pgp00000.pgp
Description: PGP signature

Reply via email to