Re: Linux vs Windows Firewalls

On Monday 22 September 2003 07:23, David Vehrs wrote:
> > If you trust your firewall's protection, why don't you publish its IP
> > address and Administrator password?  That's exactly what Russel
> > Coker did for his Linux Journal article titled
> > "Root for All on the SE Linux Play Machine".  He published
> > root's password.  See it In Aug 2003 edition.
>
> First, you should point out that this is Linux box is running all
> of the NSA Security Enhanced patches.  That it is NOT A STANDARD
> linux box.  That many of the patches used have yet to be auditted
> for other security issues.  Its a good idea but its not quite ready
> for a production environment.
>
> Dave V.

Well win2k does not come with a firewall either, and the OP
was talking about add-on packages from third partys.  So
it seemed a fair comparison to me.

SE Linux has had the code published, and undergoes heavy
utilization at the NSA, and quite a few people have been pouring
over the code.  Even Linus himself.  There is no point in the life
of a Open Source project when it is ever certified to be bug
free, so there is no authority to turn to for a pronouncement
that it is safe.

-- 
_____________________________________
John Andersen