Re: [cobalt-security] Re: New kernel

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Menno M Jansz wrote:

> I love the features of a RaQ, but if my investments are outdated
> so quickly, then I would start look at running a generic box and
> Linux distribution like Debian which I have on some other boxes. With
> those at least I know I can easily upgrade the software. And security
> patches are available quickly after a vulnerability is discovered
> (the issue being addressed in the other thread).

The two other major appliance platforms, Plesk and (I can never think of
the name of the other one <frown>) both load onto specific linux
versions.  In the case of the second one, a half-year ago they were
still limited to Red Hat 6.2.

And ...

Most of us old-timers know that once you've got a machine running you
NEVER upgrade the operating system... you just upgrade packages as you
need to.  I know some BSDi OS customers using versions years old.  When
I bought an ISP almost two years ago it was running on a BSDi system
then four years old using only required security patches.

Now as to why Sun Cobalt won't give us security packages more quickly,
that's a question only they can answer.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
Linux and Cobalt/Sun/RaQ Consulting
nobaloney.net
P. O. Box 52672, Riverside, CA  92517
voice: (909) 778-9980  *  fax: (702) 548-9484