Tony Green wrote:
On 20/02/2006, at 8:25 PM, O Plameras wrote:
Jeff Waugh wrote:
... as long as you recompile your kernel.
<SNIP> I do re-compile my
kernel, though as a matter of procedure, to trim out the unnecessary
modules and components.
<lyrics>
They say our love won't pay the rent
Before it's earned, our money's all been spent
I guess that's so, we don't have a pot
But at least I'm sure of all the things we got
Babe
I got you babe
I got you babe
</lyrics>
Someone turn off that alarm clock!
So what is it? If Tux comes out of his igloo and can see his own
shadow, we have 42 more days of checking our kernel source code for
security holes?
OpenAFS is only an fs (file system) just like ext2, ext3, reiserfs, etc.
It's got rock-solid security compared to any
other of these fs. This is compiled as device driver by linking with the
Kernel Headers.
But you still have to harden your total system. We learn from previous
experience, it is a bad habit to leave a crow bar around
when parking a car. Otherwise, some smart hacker will find more and
larger holes and tunnels in the complex laryrinths of kernel
modules and components instead of limited, narrowed, and restricted
pathways.
O Plameras
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
