[lkml]   [2005]   [Dec]   [5]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: RFC: Starting a stable kernel series off the 2.6 kernel
    Michael Frank <> wrote:


    > As to security, most vulnerabilities are hard to exploit
    > remotely


    > and practical security can be much more improved
    > by hiding detailed software versions from clients.

    Ever heard of nmap <>? Or perhaps noticed all kinds of
    attacks against Linux using old exploits or Windows specific ones? Hiding
    versions is /not/ secure. At most marginally so, and the pain for whoever
    needs the version for legitimate reasons just isn't worth it.

    > Apache
    > 2 on linux 2.6 will do instead of providing full vendor
    > specific package versions!
    > As to drivers, in case 3 month driver delay matters, HW
    > vendor can improve situation substantially by not waiting
    > 6+ months before (if at all) releasing drivers/docs for
    > linux!

    For /server/ type workloads, where you /need/ stability, you carefully pick
    the hardware and then run a selected "enterprise" distro on it. The distro
    people do the hard work of keeping your kernel up to date and secure. And
    even worry about a smooth upgrade to the next version. For a price, sure.
    But either you really need it (and gladly pay the price) or you don't (in
    which case you have nothing to complain about).
    Dr. Horst H. von Brand User #22616
    Departamento de Informatica Fono: +56 32 654431
    Universidad Tecnica Federico Santa Maria +56 32 654239
    Casilla 110-V, Valparaiso, Chile Fax: +56 32 797513
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2005-12-06 03:26    [W:0.019 / U:54.668 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site