Re: [gentoo-security] Idea for easily checking for security updates.

[Joshua Brindle]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

whoops, i forgot to send this to the list


| well
| here's another idea
| instead of putting everything into virtuals (which would be incredibly
| bad for a number of reasons) why don't you just personally decide what
| you want to check for vulnerabilities and then do that
|
| emerge -up openssh openssl apache sudo
| and so on
| and wait for us to implement true security checking in portage (which is
| ~ on it's way) via GLSA's
|
| Joshua Brindle
|
| Calum wrote:
| | On Monday 09 February 2004 12:34 pm, Matt Steven wrote:
| |
| |
| |>I like the idea of
| |>
| |>  emerge -u security
| |>
| |>But specifying what sort of security threat it is seems a waste of
| time, I
| |>think for most of us a security hole is a security hole, and they should
| |>all be patched asap.
| |
| |
| |
| | I think it's nice to have the choice. And maybe some users run
| firewalls, or
| | other servers where there are no local users. (I know I'd still
| upgrade the
| | local stuff too, but...) Or maybe they run servers in intranet
| environments
| | where they don't need to upgrade because of the chance of a DoS on
| Apache.
| |
| | It's all about choice.
| |
| |
| | --
| | gentoo-security@g.o mailing list
| |
| |
|
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFAJ7wtW5Y6NVK9A7gRAlG4AJ9i8tuAJSNQnPaJWwQl4SjtG2AQYwCgs33/
oyLIcp6IReUV1S/17agNuVI=
=2Zj9
-----END PGP SIGNATURE-----

--
gentoo-security@g.o mailing list