Re: SLFS book chapter proposals

On Mon, 2003-12-29 at 09:15, Archaic wrote:

> 
> Yes, I hope so, too, because the main fear I have now is what will
> happen after LFS-6 is released. Few, if any, security minded admins
> would advocate using a new and relatively unknown kernel in a secure
> environment. So that leaves us with either ignoring SLFS-6, or at the
Indeed - no one who cares about security would use a .0 kernel - and
likely noting less than .10 would be installed - although I would
myself, just means more work for me to monitor the devel and upgrade
every time a release is out - and earlier with patches etc.
> least maintaining SLFS-5.x and 6.x until such time as the kernel matures
> and we can confidently use it. Now I'm hoping that LFS-6 either skips
> the kernel upgrade or waits until 2.6.14 or so. I doubt that either will
> happen, so we will have our hands full for a while. I guess that's the
> pro and con of open source's fast-paced development.
No indeed..  as soon as 6.0 is settled down and the headers issue is
recolved, 2.6 will be in the LFS book..  that's nearly a guarantee.. 
LFS is as current as it can be, and that trend is likely to continue -
after all, there has been work on 2.6 going on for some time...  not
likely to stop anytime soon..  Best we can do I think is plan on
implimenting a 2.6 "Sidebar" type of thing.  A note that 2.6 is still
new, and prone to undiscovered security vulnerabilities, but, if you
want to build your system current to avoid having to migrate to 2.6
after the build, then here are a few tips...  install the latest
modutils tools, use sanitized headers etc. etc.
But of course, again, that is down the road a while before we reach that
point in time.

  Rob Day (BOFH)


-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-security
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page