Red Hat & Dell Host Open Source Security Summit

wishus writes "Red Hat and Dell said they would co-host an Open Source Security Summit. 'Join Red Hat, Dell and experts in enterprise security from around the world for a summit on securing infrastructures with open source software.'"

Re:Timing...

[Sn4xx0r]

And here is the list [sans.org] of vulnerabilities that they are talking about.

Re:Kernel compiles don't have to be horror stories

[PetiePooo]

I stand corrected. Linking is part of the greater compile cycle, but to say that the kernel must be relinked would be more precise.

I think the version I had to work on was in the 3.x range. We were working with some legacy software that only runs on that version, so we were unable to upgrade. It couldn't even be made 2K compliant, but much to the management's chagrin, didn't explode afterall. In fact it's still running like a champ!

Re:Interesting

[j_kenpo]

Excuse me, before you run your mouth, maybe you should get your facts straight. Ive run Red Hat since 4.2 as a matter of fact. I just did a fresh install of 8, and it had the mentioned applications, plus a few extras, start up by default. I had to MANUALLY disable those items from each runlevel init... Same goes for the box I upgraded, it added services that were previously disabled. And has been that way in every realease of RedHat that Ive run. This has been the case using the RedHat Installer AND using APT-RPM for doing the upgrades and installations. Now it may not be that way using the type of installation choices other than Custom, but since I do a custom install everytime I couldnt tell you...

Re:Interesting

[pellaeon]

Well, I use custom installs exclusively too, and at least RH7.1/2 didn't enable any service by default. I haven't done any new installs using RH8 or 7.3 (just upgraded), but I find it very hard to believe that they would regress like that.

I'll be able to check soon though, since I'm going to install 8 on the ~100 computers I admin. You're right about pre-7.1 installs, I don't dispute their poor security record at all.