From owner-freebsd-stable Sat Jan 4 8:26:33 2003 Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4A3B337B401 for ; Sat, 4 Jan 2003 08:26:32 -0800 (PST) Received: from obh.snafu.de (obh.snafu.de [213.73.92.34]) by mx1.FreeBSD.org (Postfix) with ESMTP id 36E3743E4A for ; Sat, 4 Jan 2003 08:26:26 -0800 (PST) (envelope-from ob@gruft.de) Received: from ob by obh.snafu.de with local (Exim 3.36 #1) id 18Ur7r-00015l-00; Sat, 04 Jan 2003 17:26:19 +0100 Date: Sat, 4 Jan 2003 17:26:19 +0100 From: Oliver Brandmueller To: dmagda@ee.ryerson.ca Cc: freebsd-stable@FreeBSD.ORG Subject: Re: FreeBSD Stability Message-ID: <20030104162619.GC52244@e-Gitt.NET> References: <200212170023.gBH0Nvlu000764@beast.csl.sri.com> <20030103000232.GA52181@blazingdot.com> <200301030117.H031HZS41668@asarian-host.net> <86d6nc99fq.fsf@number6.magda.ca> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <86d6nc99fq.fsf@number6.magda.ca> User-Agent: Mutt/1.5.1i Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hi. On Sat, Jan 04, 2003 at 11:16:57AM -0500, David Magda wrote: > You would be stuck using an old kernel- and user-land however. If > there is only one open port to the outside world, and you make sure > that program is secure then it should not be a problem. If there's no problem related to the network stack. If you don't use the resolver. If you don't have local users. For things like NTP or single daemons from the world you still can update parts of the system. What I wanted to show is, that even if you have just one open port this doesn't in all cases mean you are safe as long as this one daemon is safe. - Olli -- | Oliver Brandmueller | Offenbacher Str. 1 | Germany D-14197 Berlin | | Fon +49-172-3130856 | Fax +49-172-3145027 | WWW: http://the.addict.de/ | | Ich bin das Internet. Sowahr ich Gott helfe. | | Eine gewerbliche Nutzung aller enthaltenen Adressen ist nicht gestattet! | To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message