17.7.06

On distro-based kernels



#####
#######
# # #
#" #" #
##vvvvv##
## vvv ##
# ##
## ##
### ###
+++##### ##++
++++++# #++++++
+++++++# #+++++++
+++++#######+++++
+++ +++

Some people asked me why I don't use distro-based kernels. Well, in some machines I do, because it's easier that way, but then, specially with the 2.6 kernel development model, it's so hard for a distribution to have secure kernel packages that I simply don't believe they can. And to give you an example of that, ehre's what happened to Debian GNU/Linux last week: they had a securify flaw in one of their kernel images. In this particular case, the bug does not affect Debian stable, but it does affect Debian testing, which has security support.