* [gentoo-dev] Re: [gentoo-security] Trojan for Gentoo/GNU Linux, proof of concept
[not found] ` <3E7C4709.3090808@komcept.com>
@ 2003-03-22 21:14 99% ` Paul de Vrieze
0 siblings, 0 replies; 1+ results
From: Paul de Vrieze @ 2003-03-22 21:14 UTC (permalink / raw
To: gentoo-dev
[-- Attachment #1: signed data --]
[-- Type: text/plain, Size: 1090 bytes --]
On Saturday 22 March 2003 12:20, MAL wrote:
>
> I don't think I would trust a security/paranoid only update system
> within portage, as portage will still be working with an externally
> generated list of to-do. Building aan update locally, making sure it's
> only what you want, then packaging it, (ebuild package - tbz2 format),
> and installing it on the remote machine, is the only method i'd feel
> satisfied with.
>
I agree with your point of view. While my only "server" is a home server that
does some printing and ip sharing stuff I do make sure I don't just update
world. I don't see the point of "running emerge -u world from cron" at all.
The best protection from instability is keeping record of the mailing lists,
and not updating what is not broken.
For my desktops, I even there wait with updates for packages like gcc, glibc,
X etc. until I believe they are actually stable in a sense that I don't hear
about problems concerning them anymore.
Paul
--
Paul de Vrieze
Researcher
Mail: pauldv@cs.kun.nl
Homepage: http://www.devrieze.net
[-- Attachment #2: signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]
^ permalink raw reply [relevance 99%]
Results 1-1 of 1 | reverse | options above
-- pct% links below jump to the message on this page, permalinks otherwise --
[not found] <43280000.1048179164@krabat.ahsoftware>
[not found] ` <3E7BF439.9090007@netcabo.pt>
[not found] ` <3E7C4709.3090808@komcept.com>
2003-03-22 21:14 99% ` [gentoo-dev] Re: [gentoo-security] Trojan for Gentoo/GNU Linux, proof of concept Paul de Vrieze
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox