[svlug] Re: Updated Debian Apache Packages?

[Marc MERLIN]

On Tue, Jun 25, 2002 at 12:46:48AM +0300, Ira Abramov wrote:
> I said woody packages are not updated to secure versions as fast as the
> stable branch, i.e. fast enough for low-maintenance operations. Marc
> tells me he rolls his own compilations (I agree, then it's not woody

Note  too that  most of  the time,  I only  have to  rebuild someone  else's
already built and patched package (after quickly inspecting the patch). It's
not that much work.

> hence - Woody is NOT a secure platform (yet), it needs manual care to
> stay secure for now.

But  so does  any other  distribution. Just running  potato and  apt-getting
security daily doesn't make your system secure, it just helps to close a few
holes.
The only way to really keep any system secure is a knowledgeable sysadmin.

Marc
-- 
"A mouse is a device used to point at the xterm you want to type in" - A.S.R.
Microsoft is to operating systems & security ....
                                      .... what McDonalds is to gourmet cooking 
Home page: http://marc.merlins.org/   |   Finger marc_f at merlins.org for PGP key