July 17, 2006

On distro-based kernels



#####
#######
# # #
#" #" #
##vvvvv##
## vvv ##
# ##
## ##
### ###
+++##### ##++
++++++# #++++++
+++++++# #+++++++
+++++#######+++++
+++ +++

Some people asked me why I don't use distro-based kernels. Well, in some machines I do, because it's easier that way, but then, specially with the 2.6 kernel development model, it's so hard for a distribution to have secure kernel packages that I simply don't believe they can. And to give you an example of that, ehre's what happened to Debian GNU/Linux last week: they had a securify flaw in one of their kernel images. In this particular case, the bug does not affect Debian stable, but it does affect Debian testing, which has security support.

No comments:

Post a Comment