Messages in this thread | | | Subject | Re: New Linux distribution - PSL | Date | Wed, 10 Jun 1998 14:27:39 +0800 | From | David Luyer <> |
| |
> well, I don't know about the world - that's why I posted the message - > to find out. But Im sick and tired of all those dists that need 90% > by-hand replacing right after install. For one comp, it's ok. But for > LAN? too painfull. > > Vadim
Then become involved in the Debian project - Debian Linux tends to install a lot less stuff SUID believing instead in a sane group structure. A lot of problems mentioned on BUGTRAQ are just non-issues in Debian since it will, for example, suggest you put people in group audio instead of making audio apps SUID root (similarly, other groups like floppy, cdrom, etc).
If you really think you have the time, sure, make a new distrib. But chances are it would be much easier to help with another distribution which is already quite secure and just start working on auditing that code base [or those parts of the code base that differ from OpenBSD first, since that's where the holes will more likely be].
David.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu
| |