Re: [blfs-support] Security Advisories now live

2021-02-06 Thread Ken Moffat via blfs-support
On Sat, Feb 06, 2021 at 09:57:58PM -0500, Don Cross via blfs-support wrote:
> On Sat, Feb 6, 2021 at 9:46 PM Ken Moffat via blfs-support <
> blfs-support@lists.linuxfromscratch.org> wrote:
> 
> > The new pages for Security Advisories are now live.
> >
> > To see the LFS advisories, go to
> > http://www.linuxfromscratch.org/lfs/read.html and follow the links
> > in the Current Stable paragraphs (svn, systemd).
> >
> > To see the BLFS advisories, go to
> > http://www.linuxfromscratch.org/blfs/read.html and follow the links
> > in the Current Stable paragraphs (svn, systemd).
> >
> > ĸen
> >
> 
> That's great that you are helping us stay on the cutting edge of security
> issues. I find it fascinating and educational.
> 
> I did see a small typo on
> http://www.linuxfromscratch.org/lfs/advisories/
> "... keep on top of htat ..."
> 
> Don

Thanks. I seem to accidentally type th as ht a lot of the time.  I'm
sure there are other typos and infelicities, but I'm trying to take
a break from it for the moment.

ĸen
-- 
Any attempt to brew coffee with a teapot should result in the error
code "418 I'm a teapot". The resulting entity body MAY be short and
stout. -- rfc 2324 (1st April 1998)

-- 
http://lists.linuxfromscratch.org/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page


Re: [blfs-support] Security Advisories now live

2021-02-06 Thread Don Cross via blfs-support
On Sat, Feb 6, 2021 at 9:46 PM Ken Moffat via blfs-support <
blfs-support@lists.linuxfromscratch.org> wrote:

> The new pages for Security Advisories are now live.
>
> To see the LFS advisories, go to
> http://www.linuxfromscratch.org/lfs/read.html and follow the links
> in the Current Stable paragraphs (svn, systemd).
>
> To see the BLFS advisories, go to
> http://www.linuxfromscratch.org/blfs/read.html and follow the links
> in the Current Stable paragraphs (svn, systemd).
>
> ĸen
>

That's great that you are helping us stay on the cutting edge of security
issues. I find it fascinating and educational.

I did see a small typo on
http://www.linuxfromscratch.org/lfs/advisories/
"... keep on top of htat ..."

Don
-- 
http://lists.linuxfromscratch.org/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page


Re: [blfs-support] Is it worth jumping in for me? / Can LFS be even more simple?

2021-02-06 Thread Bruce Dubbs via blfs-support

On 2/6/21 8:16 PM, 5--- via blfs-support wrote:

Sure, that is the 'init' program (/sbin/init) which needs to be
replaced. Than you can strip down your system to be a two-files-OS (1.
kernel, 2. your init). Doubt whether it is really fun ;-)


Thank you everyone for the replies.
I tried this on a full linux distro and ran into trouble. A tutorial on 
this would be interesting. How to put together a kernel, bootloader, and 
init script or binary (preferably one simple enough you can write 
yourself), sorting out the initrd if necessary, statically compiling any 
binaries so you can start with an absolute minimum.


Well you theoretically could modify a shell to run without glibc, but 
portions of it would need to drop to assembly language to make calls ot 
the kernel.


You can read this to give you clues: 
http://www.muppetlabs.com/~breadbox/software/tiny/teensy.html


Have fun.

  -- Bruce
--
http://lists.linuxfromscratch.org/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page


[blfs-support] Security Advisories now live

2021-02-06 Thread Ken Moffat via blfs-support
The new pages for Security Advisories are now live.

To see the LFS advisories, go to
http://www.linuxfromscratch.org/lfs/read.html and follow the links
in the Current Stable paragraphs (svn, systemd).

To see the BLFS advisories, go to
http://www.linuxfromscratch.org/blfs/read.html and follow the links
in the Current Stable paragraphs (svn, systemd).

ĸen
-- 
Any attempt to brew coffee with a teapot should result in the error
code "418 I'm a teapot". The resulting entity body MAY be short and
stout. -- rfc 2324 (1st April 1998)

-- 
http://lists.linuxfromscratch.org/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page


Re: [blfs-support] Is it worth jumping in for me? / Can LFS be even more simple?

2021-02-06 Thread 5--- via blfs-support

Sure, that is the 'init' program (/sbin/init) which needs to be
replaced. Than you can strip down your system to be a two-files-OS (1.
kernel, 2. your init). Doubt whether it is really fun ;-)


Thank you everyone for the replies.
I tried this on a full linux distro and ran into trouble. A tutorial on 
this would be interesting. How to put together a kernel, bootloader, and 
init script or binary (preferably one simple enough you can write 
yourself), sorting out the initrd if necessary, statically compiling any 
binaries so you can start with an absolute minimum.

--
http://lists.linuxfromscratch.org/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page


[blfs-support] Firefox

2021-02-06 Thread Ken Moffat via blfs-support
Yesterday mozilla released firefox-78.7.1 with a security fix
described as Critical. It has now been clarified that this only
applied to Windows systems.  Therefore, if you have not already
updated beyond 78.7.0 there is no reason to do so.



ĸen
-- 
Any attempt to brew coffee with a teapot should result in the error
code "418 I'm a teapot". The resulting entity body MAY be short and
stout. -- rfc 2324 (1st April 1998)

-- 
http://lists.linuxfromscratch.org/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page