Hi,
I think better approach would be to buy a security audit to a "LEAF Bering-uClibc" setup you run. Buy two audits from different auditors to gain more credibility, if necessary. Publishing those audits to LEAF community would serve LEAF and open source in general as much as any contribution of code, documentation etc.. Similarly if another does the same thing, you could use the released audits to build recognition and trust among those in doubt without "known names". In general about security, I think, it is much better to buy external audits for systems, setups and administration than to trust some names. Technically even the best security systems can become meaningless with bad administration, administrative practices or just some unnoticed human omission. It is good to have more eyes to look at what you have done, if you really want to be sure. Best regards, Erkki on 25.4.2008 20:48 Mats Erik Andersson wrote: > Hello there, > > I completed a virtualized Bering-uClibc machine inside > a Vmware Server yesterday, ment to be deployed within > the WinXP computers of my co-workers. Testing on Debian > it works like a charm. Unfortunately, the head of the > firm will not accept it, since our banking customers > would never accept a security solution based on Linux, > (Microsoft is by the way banned even more strongly!) > and much less on an unknown name "LEAF Bering-uClibc", > so I will switch to OpenBSD, which I already deployed > on the our internal Ultrasparc firewalls. > > Now, my boss made the relevant comment that it would > be of benefit to the LEAF project as a whole, were it > possible to produce some names of well established > companies or organizations that do in fact use LEAF > in some officially aknowledged manner. Do we know > of any such benevolent business? I do not, anyway! > Clearly, there is this abreviation SOHO, but is there > no admitted deployment at all of Bering? Knowledge > of a few names would strengthen our case when it > comes to put the merits of LEAF into action. > > Regards > > Mats Erik Andersso > > ------------------------------------------------------------------------- > This SF.net email is sponsored by the 2008 JavaOne(SM) Conference > Don't miss this year's exciting event. There's still time to save $100. > Use priority code J8TL2D2. > http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone > ------------------------------------------------------------------------ > leaf-user mailing list: leaf-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/leaf-user > Support Request -- http://leaf-project.org/ ------------------------------------------------------------------------- This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone ------------------------------------------------------------------------ leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
