Re: Linux security q's of day

[Barrie Dempster <barrie () reboot-robot net>]

On Wednesday 05 July 2006 20:45, Dave Aitel wrote:
> Questions of the day:
>
> Is there a graph anywhere comparing different linux distributions
> patch speed? Which distro patched the OpenOffice bugs first/last?

Haven't seen one, do you think it's likely to differ to any noticable degree 
between the major distros ?

> When will Ubuntu include grsec?

https://launchpad.net/people/ubuntu.hardened

Lorenzo Hernández García-Hierro started the ubuntu-hardened effort, modelled 
after debian hardened, but it hasn't really gone anywhere yet, I had a few 
disucssions with him about it around the time the initial Ubuntu releases 
(warty/hoary) were gaining ground, lot's of vision, but not a lot of visible 
effort. It has very little support and I don't think including any sort of 
grsec type feature is at the forefront of canonicals thinking. Shame really, 
as a binary based distribution with such a well formed package management 
system and well defined lifecycle could really produce a distribution with 
some sensible default security measures without too much of a detriment to 
usability.

https://lists.ubuntu.com/archives/ubuntu-hardened/2006-June/000150.html

This was the latest mail to the Ubuntu-hardened list which is discussing the 
features ear-marked for Edgy. (The same thing happened for Breezy but it 
didn't go anywhere then or for Dapper) As you can see there was a real flurry 
of excitement on the mailing list regarding the announcement..........

Ubuntu is doing well in usability/popularity, but they could really do with 
stepping up the security if they want to continue playing the game.

-- 
With Regards..
Barrie Dempster (zeedo) - Fortiter et Strenue

              - http://reboot-robot.net -

"He who hingeth aboot, geteth hee-haw" Victor - Still Game

Attachment: smime.p7s
Description:

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave