Re: [CentOS] Need advice on 3rd party repository

2007-10-08 Thread Jesse Cantara
Hey, thanks for the helpful info Bill... Honestly though, thanks to the other people who actually gave me some useful info. The choice of "Scanalert"'s (I'm going to use quotes where appropriate) scan is not my choice. Users like to see it, the boss likes to see it, that's what I have to go wi

Re: [CentOS] Need advice on 3rd party repository

2007-10-07 Thread Gary Richardson
Hi, As others have pointed out, as long as you're patched up, the fixes are backported. Checkbox security is lame. I strongly recommend setting ServerToken ProductOnly See http://httpd.apache.org/docs/1.3/mod/core.html#servertokens for more. It's more secure, because a script kiddie looking in

Re: [CentOS] Need advice on 3rd party repository

2007-10-05 Thread Bill Campbell
On Fri, Oct 05, 2007, Ray Van Dolson wrote: >On Fri, Oct 05, 2007 at 07:29:12PM -0400, Jesse Cantara wrote: >> Hello, >> >> I am looking for some advice on a way to update some packages to newer >> releases than are available in the standard CentOS repositories. >> Specifically, I am trying to u

Re: [CentOS] Need advice on 3rd party repository

2007-10-05 Thread Ray Van Dolson
On Fri, Oct 05, 2007 at 07:29:12PM -0400, Jesse Cantara wrote: > Hello, > > I am looking for some advice on a way to update some packages to newer > releases than are available in the standard CentOS repositories. > Specifically, I am trying to update apache and PHP to conform to > "Scanalert"'

[CentOS] Need advice on 3rd party repository

2007-10-05 Thread Jesse Cantara
Hello, I am looking for some advice on a way to update some packages to newer releases than are available in the standard CentOS repositories. Specifically, I am trying to update apache and PHP to conform to "Scanalert"'s "Hacker Safe" website security scan, and the required versions do not e