Re: Debian or Redhat 7???

2001-02-22 Thread Mike Fedyk
Tal Danzig wrote: There are no mirrors of security.debian.org (or shouldn't be) for security reasons. This way the authenticity of security packages can be better controlled. - Tal What about local mirrors? I can imagine a company with several hundred, or maybe thousands of debian

Re: Debian or Redhat 7???

2001-02-20 Thread Aaron Ghent
Steve here, Well first, I repent of calling Linux 7: Redhat 7. Yes I am new. I have been maintaining my own box from a su level for about 3 months. That is why I was calling in an expert to install Debian tomorrow. It has become quite obvious to me that I am way over my head in trying

Re: Debian or Redhat 7???

2001-02-20 Thread Rick Rezinas
oops...guess there was a reason I wasn't using it already ;) rick On Mon, 19 Feb 2001, Tal Danzig wrote: On Mon, Feb 19, 2001 at 07:13:40PM -0800, Rick Rezinas wrote: I've been loosely foloowing this thread, and hope you have the best of luck locking down. A few places to start with the

Re: Debian or Redhat 7???

2001-02-20 Thread Aaron Ghent
Steve here, Well first, I repent of calling Linux 7: Redhat 7. Yes I am new. I have been maintaining my own box from a su level for about 3 months. That is why I was calling in an expert to install Debian tomorrow. It has become quite obvious to me that I am way over my head in trying to

Re: Debian or Redhat 7???

2001-02-19 Thread Steve Rudd
Steve here, Well first, I repent of calling Linux 7: Redhat 7. Yes I am new. I have been maintaining my own box from a su level for about 3 months. That is why I was calling in an expert to install Debian tomorrow. It has become quite obvious to me that I am way over my head in trying to get

Re: Debian or Redhat 7???

2001-02-19 Thread Tal Danzig
On Tue, Feb 20, 2001 at 04:39:09PM +1300, Matthew Sherborne wrote: It may get too heavy to not mirror the security update packages. Why don't we put signature verification into apt and dpkg and mirror everything ? Sounds to me like a good idea; however, it would probably mean rather

Re: Debian or Redhat 7???

2001-02-19 Thread Tal Danzig
On Mon, Feb 19, 2001 at 07:13:40PM -0800, Rick Rezinas wrote: I've been loosely foloowing this thread, and hope you have the best of luck locking down. A few places to start with the inetd.conf file. You probably don't need any of those services. Install ssh. Setup your apt sources.list

Re: Debian or Redhat 7???

2001-02-19 Thread Matthew Sherborne
It may get too heavy to not mirror the security update packages. Why don't we put signature verification into apt and dpkg and mirror everything ? And perhaps have a tool that checks a bunch of known mirrors for discrepencies in the keyring packages ? And have a single URL, location aware,

Re: Debian or Redhat 7???

2001-02-19 Thread David B . Harris
To quote Steve Rudd [EMAIL PROTECTED], # Well first, I repent of calling Linux 7: Redhat 7. Yes I am new. I have # been maintaining my own box from a su level for about 3 months. That is why # I was calling in an expert to install Debian tomorrow. It has become quite # obvious to me that I am

Re: Debian or Redhat 7???

2001-02-19 Thread Rick Rezinas
I've been loosely foloowing this thread, and hope you have the best of luck locking down. A few places to start with the inetd.conf file. You probably don't need any of those services. Install ssh. Setup your apt sources.list to check for deb http://security.debian.org stable/updates main

Re: Debian or Redhat 7???

2001-02-19 Thread Tal Danzig
On Mon, Feb 19, 2001 at 07:13:40PM -0800, Rick Rezinas wrote: I've been loosely foloowing this thread, and hope you have the best of luck locking down. A few places to start with the inetd.conf file. You probably don't need any of those services. Install ssh. Setup your apt sources.list

Re: Debian or Redhat 7???

2001-02-19 Thread Matthew Sherborne
It may get too heavy to not mirror the security update packages. Why don't we put signature verification into apt and dpkg and mirror everything ? And perhaps have a tool that checks a bunch of known mirrors for discrepencies in the keyring packages ? And have a single URL, location aware,

Re: Debian or Redhat 7???

2001-02-19 Thread Tal Danzig
On Tue, Feb 20, 2001 at 04:39:09PM +1300, Matthew Sherborne wrote: It may get too heavy to not mirror the security update packages. Why don't we put signature verification into apt and dpkg and mirror everything ? Sounds to me like a good idea; however, it would probably mean rather

Re: Debian or Redhat 7???

2001-02-19 Thread Richard Taylor
This may help you as well. http://www.securityportal.com/lasg/ http://www.cert.org/ Steve here, Well first, I repent of calling Linux 7: Redhat 7. Yes I am new. I have been maintaining my own box from a su level for about 3 months. That is why I was calling in an expert to install Debian