From owner-freebsd-security  Thu Apr 18 20:20:44 2002
Delivered-To: freebsd-security@freebsd.org
Received: from lariat.org (lariat.org [12.23.109.2])
	by hub.freebsd.org (Postfix) with ESMTP id 4BFAD37B42A
	for <freebsd-security@freebsd.org>; Thu, 18 Apr 2002 20:20:23 -0700 (PDT)
Received: from mustang.lariat.org (IDENT:ppp0.lariat.org@lariat.org [12.23.109.2])
	by lariat.org (8.9.3/8.9.3) with ESMTP id VAA26436;
	Thu, 18 Apr 2002 21:20:15 -0600 (MDT)
X-message-flag: Warning! Use of Microsoft Outlook may make your system susceptible to Internet worms.
Message-Id: <4.3.2.7.2.20020418211757.022614d0@nospam.lariat.org>
X-Sender: brett@nospam.lariat.org
X-Mailer: QUALCOMM Windows Eudora Version 4.3.2
Date: Thu, 18 Apr 2002 21:20:08 -0600
To: hawkeyd@visi.com
From: Brett Glass <brett@lariat.org>
Subject: Re: FreeBSD Security Advisory FreeBSD-SA-02:21.tcpip
Cc: freebsd-security@freebsd.org
In-Reply-To: <20020418220642.A1647@sheol.localdomain>
References: <4.3.2.7.2.20020418203122.0218e970@nospam.lariat.org>
 <4.3.2.7.2.20020418200936.023fedd0@nospam.lariat.org>
 <4.3.2.7.2.20020418141843.021d1540_nospam.lariat.org@ns.sol.net>
 <20020418182218.GA35672_peitho.fxp.org@ns.sol.net>
 <4.3.2.7.2.20020418141843.021d1540_nospam.lariat.org@ns.sol.net>
 <200204190149.g3J1nOb01496@sheol.localdomain>
 <4.3.2.7.2.20020418200936.023fedd0@nospam.lariat.org>
 <20020418212445.A1577@sheol.localdomain>
 <4.3.2.7.2.20020418203122.0218e970@nospam.lariat.org>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

At 09:06 PM 4/18/2002, D J Hawkey Jr wrote:

>> GENERIC.
>
>Wouldn't cut it for some of the boxes I am or have been responsible for.
>It'd boot and run, mostly, but it wouldn't "communicate".

And at that point you'd quickly rebuild the kernel.

>Excepting servers that can't connect to a "master box" via NFS (as has been
>detailed), you can't possibly build and install a kernel inside of the ten
>to twenty (max?) minutes of downtime to install an already-built kernel from
>that NFS server "master".

If you've got that many to do, it *is* better to create a build
server. 

>Even were it so, you'd end up with a tuned kernel running against it's
>lowest common denominator OS; that's acceptable to you? 

Again, you're not making sense. It wouldn't be the "lowest common
denominator OS;" it'd be THE latest version of the OS.

--Brett


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message