I have been happily using LEAF Bering UClibc and it's predecessors going back to Eigerstein. I love the package. It has worked very well for us as both a vanilla router and as a firewall / router. My Linux admin has some concerns and I am hoping someone here could take a crack at addressing them. All of the concerns are related to security. Question 1: How do you handle security patches for packages? For example, if you were running a "full" Debian distro, a simple "apt-get update" would insure that you pull down the latest security patches... What is the approach to making sure UClibc is secure...? Question 2: As I understand it, the inherent advantage to running a Linux embedded firewall is that it is running completely in RAM and that you are using media that is not writable unless it is mounted. I used to use a dual-floppy setup and we can always flip the tabs to make sure the disks are not writable. But... I have recently switched to CF and now I am not so sure I can boast the media is not writable.. Final "cover all" question. Can someone please lay out for me the advantages and pitfalls of running LEAF Bering UClibc against say... A full Debian install on a regular hard drive? I have not found anything online that does an objective comparison. I am hoping that someone on the LEAF list could have a crack at laying it all out so I can make sure I make an informed decision to either stay with or get rid of this package from our infrastructure. Thanks in advance! Troy
Our capacity for understanding is inversely proportional to how much we think we know. ------------------------------------------------------- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_idt77&alloc_id492&op=click ------------------------------------------------------------------------ leaf-user mailing list: [email protected] https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
