Re: Strongest linux - kernel patches

2003-07-07 Thread Michelle Konzack
Am 02:55 2003-07-03 +0200 hat Luis Gomez - InfoEmergencias geschrieben: On Miércoles, 2 de Julio de 2003 15:05, Preben Randhol wrote: What about: http://www.nsa.gov/selinux/ ? For the sake of God, how in hell can we associate nsa.gov with secure? Excuse me if I'm bullshitting, but I understand

Re: Strongest linux - kernel patches

2003-07-07 Thread Michelle Konzack
Am 02:55 2003-07-03 +0200 hat Luis Gomez - InfoEmergencias geschrieben: On Miércoles, 2 de Julio de 2003 15:05, Preben Randhol wrote: What about: http://www.nsa.gov/selinux/ ? For the sake of God, how in hell can we associate nsa.gov with secure? Excuse me if I'm bullshitting, but I understand

Re: Strongest linux - kernel patches

2003-07-03 Thread Hubert Chan
Peter == Peter Cordes [EMAIL PROTECTED] writes: [...] Peter Luckily, that's a solved problem. Con Kolivas's -ck3 patch for Peter 2.4.21 includes grsecurity and XFS. There's also wolk, which contains grsecurity, XFS, and a ton of other patches. http://sourceforge.net/projects/wolk --

Re: Strongest linux - kernel patches

2003-07-03 Thread Luis Gomez - InfoEmergencias
Oh men, I didn't pay attention to the thread for all the day. Thank you VERY much!!! I'll be taking a look at them ASAP. Thanks ppl!!! Pope On Jueves, 3 de Julio de 2003 04:28, Hubert Chan wrote: Peter == Peter Cordes [EMAIL PROTECTED] writes: [...] Peter Luckily, that's a

Re: Strongest linux - kernel patches

2003-07-03 Thread Peter Cordes
On Thu, Jul 03, 2003 at 07:43:23PM +0200, Ulrich Scholler wrote: During the reign of 2.4.19, I've had problems with kswapd dying after a few days of uptime when I used the -ck patches. Is this still the case? I'll let you know in a few days... root 4 0.0 0.0 00 ?

Re: Strongest linux - kernel patches

2003-07-03 Thread Hubert Chan
Peter == Peter Cordes [EMAIL PROTECTED] writes: [...] Peter Luckily, that's a solved problem. Con Kolivas's -ck3 patch for Peter 2.4.21 includes grsecurity and XFS. There's also wolk, which contains grsecurity, XFS, and a ton of other patches. http://sourceforge.net/projects/wolk --

Re: Strongest linux - kernel patches

2003-07-03 Thread Ulrich Scholler
Hi, On Wed Jul 02, 2003 at 22:50:20 -0300, Peter Cordes wrote: Luckily, that's a solved problem. Con Kolivas's -ck3 patch for 2.4.21 includes grsecurity and XFS. (I didn't mention it before because I didn't realize it was significant. (I'm not using ACLs).) Con's webpage is

Re: Strongest linux - kernel patches

2003-07-03 Thread Luis Gomez - InfoEmergencias
Oh men, I didn't pay attention to the thread for all the day. Thank you VERY much!!! I'll be taking a look at them ASAP. Thanks ppl!!! Pope On Jueves, 3 de Julio de 2003 04:28, Hubert Chan wrote: Peter == Peter Cordes [EMAIL PROTECTED] writes: [...] Peter Luckily, that's a

Re: Strongest linux - kernel patches

2003-07-02 Thread Alvin Oga
On Tue, 1 Jul 2003, valerian wrote: On Tue, Jul 01, 2003 at 02:36:37PM +0200, Javier Castillo Alcibar wrote: Hi all, I want to setup a new linux server in internet (apache, php, postfix, mysql, dns...), and I would like to patch the standard kernel with some security patches. but

Re: Strongest linux - kernel patches

2003-07-02 Thread Preben Randhol
Alvin Oga [EMAIL PROTECTED] wrote on 02/07/2003 (12:46) : rest of the kernel hardening patches http://linux-sec.net/Harden/kernel.gwif.html What about: http://www.nsa.gov/selinux/ ? -- Ada95 is good for you. http://www.crystalcode.com/codemage/MainMenu/Coding/Ada/IntroducingAda.php -- To

Re: Strongest linux - kernel patches

2003-07-02 Thread Adam ENDRODI
On Wed, Jul 02, 2003 at 01:17:22PM +0200, Thomas Sjgren wrote: -- than use the latest php, apache, postfix, mysql, dns - probably want to chroot your dns app ... and don't forget to build the packages with your SSP patched GCC :) I doubt if SSP provides additional security beyound

Re: Strongest linux - kernel patches

2003-07-02 Thread Luis Gomez - InfoEmergencias
On Miércoles, 2 de Julio de 2003 15:05, Preben Randhol wrote: What about: http://www.nsa.gov/selinux/ ? For the sake of God, how in hell can we associate nsa.gov with secure? Excuse me if I'm bullshitting, but I understand that those people who refuse to export strong criptography unless it

Re: Strongest linux - kernel patches

2003-07-02 Thread Peter Cordes
On Thu, Jul 03, 2003 at 02:55:53AM +0200, Luis Gomez - InfoEmergencias wrote: On Mi?rcoles, 2 de Julio de 2003 15:05, Preben Randhol wrote: What about: http://www.nsa.gov/selinux/ ? For the sake of God, how in hell can we associate nsa.gov with secure? Excuse me if I'm bullshitting, but I

Re: Strongest linux - kernel patches

2003-07-02 Thread Luis Gomez - InfoEmergencias
On Jueves, 3 de Julio de 2003 03:18, Peter Cordes wrote: (...) This is starting to get a bit off topic, and it was for the most part agreed in a recent thread about US foreign policy that this doesn't belong on deb-sec. Further discussion about politics, rather than specifically about

Re: Strongest linux - kernel patches

2003-07-02 Thread Alvin Oga
On Tue, 1 Jul 2003, valerian wrote: On Tue, Jul 01, 2003 at 02:36:37PM +0200, Javier Castillo Alcibar wrote: Hi all, I want to setup a new linux server in internet (apache, php, postfix, mysql, dns...), and I would like to patch the standard kernel with some security patches. but

Re: Strongest linux - kernel patches

2003-07-02 Thread Thomas Sjögren
Ugly reply, but here goes... On Tue, Jul 01, 2003 at 04:27:21PM -0700, Alvin Oga wrote: On Tue, 1 Jul 2003, valerian wrote: On Tue, Jul 01, 2003 at 02:36:37PM +0200, Javier Castillo Alcibar wrote: Hi all, I want to setup a new linux server in internet (apache, php, postfix,

Re: Strongest linux - kernel patches

2003-07-02 Thread Preben Randhol
Alvin Oga [EMAIL PROTECTED] wrote on 02/07/2003 (12:46) : rest of the kernel hardening patches http://linux-sec.net/Harden/kernel.gwif.html What about: http://www.nsa.gov/selinux/ ? -- Ada95 is good for you. http://www.crystalcode.com/codemage/MainMenu/Coding/Ada/IntroducingAda.php

Re: Strongest linux - kernel patches

2003-07-02 Thread Adam ENDRODI
On Wed, Jul 02, 2003 at 01:17:22PM +0200, Thomas Sjögren wrote: -- than use the latest php, apache, postfix, mysql, dns - probably want to chroot your dns app ... and don't forget to build the packages with your SSP patched GCC :) I doubt if SSP provides additional security beyound

Re: Strongest linux - kernel patches

2003-07-02 Thread Luis Gomez - InfoEmergencias
On Miércoles, 2 de Julio de 2003 15:05, Preben Randhol wrote: What about: http://www.nsa.gov/selinux/ ? For the sake of God, how in hell can we associate nsa.gov with secure? Excuse me if I'm bullshitting, but I understand that those people who refuse to export strong criptography unless it

Re: Strongest linux - kernel patches

2003-07-02 Thread Peter Cordes
On Thu, Jul 03, 2003 at 02:55:53AM +0200, Luis Gomez - InfoEmergencias wrote: On Mi?rcoles, 2 de Julio de 2003 15:05, Preben Randhol wrote: What about: http://www.nsa.gov/selinux/ ? For the sake of God, how in hell can we associate nsa.gov with secure? Excuse me if I'm bullshitting, but I

Re: Strongest linux - kernel patches

2003-07-02 Thread Luis Gomez - InfoEmergencias
On Jueves, 3 de Julio de 2003 03:18, Peter Cordes wrote: (...) This is starting to get a bit off topic, and it was for the most part agreed in a recent thread about US foreign policy that this doesn't belong on deb-sec. Further discussion about politics, rather than specifically about

Re: Strongest linux - kernel patches

2003-07-02 Thread Peter Cordes
On Thu, Jul 03, 2003 at 03:43:32AM +0200, Luis Gomez - InfoEmergencias wrote: I am as well trying to build secure systems (what an ethereus term!). In my case I wanted to try grsecurity but I think I won't be able to use it in a good way unless I spend quite a lot of time reading their docs