Re: Secure Linux From Scratch

Ken Moffat <[email protected]> Tue, 23 Dec 2003 23:30:25 +0000 (GMT)
Newsgroups gmane.linux.lfs.security
Message-ID <Pine.LNX.4.58.0312232324100.21953@ppg_penguin>
On Wed, 24 Dec 2003, Christos Gioran wrote:

>
> Is it wise to use cvs (i.e. non officially stable) versions to build hardened
> systems? IMO no but if you know things to be different in case of binutils I
> rest my case.

Just for the record, binutils-2.14.90.0.7 (which is used in
"winter.txt") _is_ released, but by HJ Lu rather than the FSF.  Almost
every other linux distro uses an HJL binutils, so although the changes
have come from CVS it's not exactly as risky as picking up tonight's
version of something and seeing what happens.  For further discussion /
flamewars about which version of binutils to use, consult the voluminous
lfs archives at your leisure ;)

Having said that, I too am uncomfortable using (unreleased) CVS source
for the basic infrastructure.

Ken
-- 
I'm as free as a bird now, and this bird you cannot chain.
-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-security
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page