Re: Ptrace hole / Linux 2.2.25

Alan Cox (alan@redhat.com)
Sun, 23 Mar 2003 14:38:10 -0500 (EST)


> Yes, but that's pretty irrelevant. People should not depend on such
> sources to get security fixes. Anything so critical should be included
> in the official kernel as soon as possible -- any reasons against?

Several
- We aren't about to release an official kernel right now afaik,
there are bugs left to sort out first
- Anyone can apply the patch themselves
- Anyone can go and get a vendor kernel
- Anyone can go and release their own 2.4.20.1 or 2.4.20-sec or
whatever if they feel strongly about it

Just go do it. If someone wants to be a contact point for build existing
base kernels + published security fix trees I'm pretty sure kernel.org
would host them too.

Alan

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/