Return-Path: <linux-kernel-owner+willy=40w.ods.org@vger.kernel.org>
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
	id <S263216AbTCWVBK>; Sun, 23 Mar 2003 16:01:10 -0500
Received: (majordomo@vger.kernel.org) by vger.kernel.org
	id <S263233AbTCWVBJ>; Sun, 23 Mar 2003 16:01:09 -0500
Received: from pc2-cwma1-4-cust86.swan.cable.ntl.com ([213.105.254.86]:7590
	"EHLO irongate.swansea.linux.org.uk") by vger.kernel.org with ESMTP
	id <S263216AbTCWVBH>; Sun, 23 Mar 2003 16:01:07 -0500
Subject: Re: Ptrace hole / Linux 2.2.25
From: Alan Cox <alan@lxorguk.ukuu.org.uk>
To: Florian Weimer <fw@deneb.enyo.de>
Cc: Martin Mares <mj@ucw.cz>,
       Linux Kernel Mailing List <linux-kernel@vger.kernel.org>
In-Reply-To: <87znnlakmc.fsf@deneb.enyo.de>
References: <20030323194012$6886@gated-at.bofh.it>
	 <20030323194014$66c3@gated-at.bofh.it>
	 <20030323195010$5026@gated-at.bofh.it>
	 <20030323195012$6f30@gated-at.bofh.it>
	 <20030323200029$737b@gated-at.bofh.it>
	 <20030323202005$2a74@gated-at.bofh.it>  <87znnlakmc.fsf@deneb.enyo.de>
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Organization: 
Message-Id: <1048458288.10712.78.camel@irongate.swansea.linux.org.uk>
Mime-Version: 1.0
X-Mailer: Ximian Evolution 1.2.2 (1.2.2-5) 
Date: 23 Mar 2003 22:24:49 +0000
Sender: linux-kernel-owner@vger.kernel.org
X-Mailing-List: linux-kernel@vger.kernel.org
Content-Length: 878
Lines: 20

On Sun, 2003-03-23 at 20:33, Florian Weimer wrote:
> Well, this is a problem which will be fixed over time.  Amorphous
> distributions such as Debian will no longer be notified first, and

Why would anyone do that. Debian is a bunch of amateurs true, but
they happen to be a bunch of extremely professional amateurs when it
comes to security.

The problem vendor-sec has is with all the tiny little groups, because
its hard to know if they are going to act securely or not. Now I trust
Russell but thats because I know him, many of the others are hard
choices.

If you get it wrong stuff leaks, take a look at the latest CERT fiasco

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/