Re: [gentoo-hardened] hardened-sources-2.6.x results.

[Michael Atighetchi]

On Wed, Mar 17, 2004 at 01:08:56PM -0500, Ned Ludd wrote:
> On Wed, 2004-03-17 at 12:46, Michael Atighetchi wrote:
> > On Mon, Mar 15, 2004 at 08:20:31PM -0500, Ned Ludd wrote:
> > > hardened-dev-sources-2.6 is available for "testing"
> > >
> >
> > <snip>
> >
> > > Oh wait one more thing.. If you really care about security you probably
> > > should stick with 2.4.x
> > >
> >
> > Could you explain more why you think 2.6 is "less" secure thatn 2.4 ?
>
> I'm not saying that 2.6.x is less secure in anyway. 2.6.x has been out
> all of what a few months? And the security patches even less time. So
> without proper security regression tests done for 2.6.x yet I'll stick
> with recommending that it not be used for production environments yet.
> 2.4.x on the other hand has been audited by many sets of eyes where
> 2.6.x has probably been reviewed by a few.
>
> Auditing and regression testing is welcome.
>
I see. We starting using a 2.4 gentoo linux distribution a couple of
months ago, and had good luck with it. However, we ran into install
difficulties with the 2.6 live cd, which were painfull but we worked
around them. 

However, we currently face an issue with stdout redirection. We start
our java processes via a .sh script and redirect stdout/stderr to a file via
 > file.txt 2>&1 . By changing from 2.4 to 2.6 we noticed that
 file.txt gets created when the .sh script starts up, up it does not
 get any content for a while (about 6 minutes and about 100k of
 log), after which the whole file shows up. It looks like a buffering
 problem of sort.

 We are using 
 Linux dcaf 2.6.4-rc2-mm1 #2 Mon Mar 15 17:33:02 EST 2004 i686 Pentium III (Coppermine) GenuineIntel GNU/Linux
 with the following fs
 /dev/hda3 on / type ext3 (rw,noatime)

 Any clues ?

Michael


> -peace
>
> >
> > Michael
> >
> >
> > > -peace
> > >



-- 
matighet@×××.com   BBN Technologies

--
gentoo-hardened@g.o mailing list