Re: [vserver] kernel last security update for centos 5

From: Daniel Hokka Zakrisson <daniel_at_hozac.com>
Date: Thu 24 Apr 2008 - 11:23:52 BST
Message-ID: <40988.192.168.101.12.1209032632.squirrel@intranet>

Corey Wright wrote:
> On Thu, 24 Apr 2008 00:30:50 +0200 (CEST)
> "Daniel Hokka Zakrisson" <daniel@hozac.com> wrote:
>
>> jean-marc pouchoulon wrote:
>> > helo all,
>> >
>> > This is not really a vserver question, but I'm sure the guys on this
>> > list pay attention on security Kernel.
>> > is 2.6.22.19 vserver kernel for centos 5, provides on dhozac RPM
>> > site contains all the security fixes needed to be in a safe
>> > environment ? I guess the answer is yes but I need to be sure.
>>
>> I don't know what security fixes you are referring to, but as far as I
>> know are there no known issues with 2.6.22.19.
>
> i've been tracking oliver pinter's 2.6.22 git repositories (kernel source
> tree [1] & patches [2]). his 2.6.22.20 & 2.6.22.21 releases seem to only
> include bugfixes [3] [4], but his 2.6.22.22, which he recently advertised
> on lkml [5], mentions a security fix.

No, it mentions a fix to the security subsystem (in this case,
SELinux-hooks for splice).

> his patches for 2.6.22.20 & 2.6.22.21 both cleanly apply to
> 2.6.22.19-vs2.2.0.7 (except for EXTRAVERSION in the Makefile, but that's
> cosmetic & expected). i haven't rebooted my server yet to run either
> version, but i don't expect any problems when i do.
>
> [1] http://repo.or.cz/w/linux-2.6.22.y-op.git
> [2] http://repo.or.cz/w/linux-2.6.22.y-op-patches.git
> [3]
> http://repo.or.cz/w/linux-2.6.22.y-op-patches.git?a=blob;f=patch-2.6.22.y/chlog-v2.6.22.20-op1
> [4]
> http://repo.or.cz/w/linux-2.6.22.y-op-patches.git?a=blob;f=patch-2.6.22.y/chlog-v2.6.22.21-op1
> [5] http://lkml.org/lkml/2008/4/21/309
>
> corey
> --
> undefined@pobox.com
>

-- 
Daniel Hokka Zakrisson
Received on Thu Apr 24 14:56:16 2008
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Thu 24 Apr 2008 - 14:56:21 BST by hypermail 2.1.8