Re: [cobalt-security] Raq 550 Remote Exploits?

["Zeffie" <cobaltlist@xxxxxxxx>]

> What is stopping the Cobalt Community from deploying newer versions of the
> kernel patched against exploits? I've not tried to build a Cobalt kernel
> in a Long, Long, Long time, but we should be able to diff the Cobalt code
> against a generic source tree to get a base-line patch, and then patch up
> revision by revision until we have a kernel that tracks against the latest
> code.

I thought so too, and when I found these "things" it was the first thing I
looked at... I have worked on the mip's on up and it's really now "Cobalt
Linux." It would seem they started with "a unknown version" and have been
building it from there ever since..  Looking at the changelog it would seem
it has gotten a lot of work and our kernel developers have it all theirs...

> It just seems that the Cobalt community has become a bunch of total
> morons, unable to grasp the concept that this is simply an x86 Linux box
> with a few caveats. There is no special magic to securing Linux, as long
> as you have source to work with, and as far as I know, all source has been
> released to the community already.

no it has not all been released and I have tried over and over to get the
RaQ4 srpms to complete proper rebuilding of various things.

<PLEASE DUNCAN>
I need the RaQ4 GUI and PERL and other SRPMS!
and It would be nice to know if I could live without the bandwidth stuff...
etc...
</PLEASE DUNCAN>

> Are we missing something proprietary (binary module like Phoenix Adaptive
> Firewall) that is preventing this from happening, or do we just lack the
> organization to rally around a project and move forward?
>     Vice President of N2Net, a New Age Consulting Service, Inc. Company

Both.

Zeffie
Cobalt RaQ System Administration, Maintenance and Repairs.
http://www.zeffie.com/how_to_contact_zeffie.html 734.454.9117
http://www.zeffie.com/ Home of the Worlds Largest Collection of RaQ rpms
Advanced Cobalt Security, Firewall, Snort, AntiSpam, AntiVirus, etc. GUI's