From owner-freebsd-security Sat Jun 19 5:35:43 1999 Delivered-To: freebsd-security@freebsd.org Received: from flood.ping.uio.no (flood.ping.uio.no [129.240.78.31]) by hub.freebsd.org (Postfix) with ESMTP id 6741014E7A for ; Sat, 19 Jun 1999 05:35:40 -0700 (PDT) (envelope-from des@flood.ping.uio.no) Received: (from des@localhost) by flood.ping.uio.no (8.9.3/8.9.1) id OAA85929; Sat, 19 Jun 1999 14:34:21 +0200 (CEST) (envelope-from des) To: Joe Greco Cc: synk@swcp.com (Brendan Conoboy), security@FreeBSD.ORG Subject: Re: make world clobbers (was Re: some nice advice...) References: <199906181955.OAA78685@aurora.sol.net> From: Dag-Erling Smorgrav Date: 19 Jun 1999 14:34:20 +0200 In-Reply-To: Joe Greco's message of "Fri, 18 Jun 1999 14:55:22 -0500 (CDT)" Message-ID: Lines: 15 X-Mailer: Gnus v5.5/Emacs 19.34 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Joe Greco writes: > Any server application, be it sendmail, named, ntpd, apache, squid, etc etc > etc., needs to be compiled fresh from the vendor. That is complete bullshit. By doing this, you are *introducing* problems rather than solving them. The FreeBSD developers spend a lot of effort fixing bugs, plugging security holes, and adapting software to run optimally on FreeBSD. You shouldn't hand-roll things like sendmail or BIND unless you're prepared to spend a *lot* of time duplicating their work, and making sure you got it right and didn't introduce any bugs of your own in the process. DES -- Dag-Erling Smorgrav - des@flood.ping.uio.no To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message