Re: auditing problems

On Sat, 12 Mar 2005 [email protected] wrote:

> I'm not sure why the horrible auditing problems are less horrible
> when one is doing all the dependency work manually rather than
> automatically -- I would have assumed the reverse.  I'm not about
> to rebuild my whole system every time a new security patch gets
> issued -- something new would break in the build every time.

I'm not sure whether your comments are in response to my post, but if they
are...

The point I was making that if packages started including all their
dependencies in the package, you'd need to check every package on your
system, see whether it links against the affected version(s) of the
dependency and rebuild it.

As things are, and assuming dynamic linking, then all you need to do is
update the dependency in question and restart any processes using it that
are currently running.

Best Regards,
Alex.
-- 
Alex Butcher      Brainbench MVP for Internet Security: www.brainbench.com
Bristol, UK                      Need reliable and secure network systems?
PGP/GnuPG ID:0x271fd950                         <http://www.assursys.com/>