Re: Penalty of SELinux?


On Sep 27, 2007, at 10:54 AM, Michelle Konzack wrote:

Am 2007-09-24 10:01:12, schrieb David Brodbeck:
Same basic problem, I think. To apply security patches you have to
recompile. To recompile, you have to use GCC, which is a resource
hog. You'd get old and die waiting for "make world" to finish on a
machine with 64 megs of RAM.

One solution, if there are faster machines on the LAN, might be to
use distcc. But then you're not "really" stand-alone.
------------------------- END OF REPLIED MESSAGE -------------------------

But you know, that you can get NetBSD as binary distribution like Debian?

Yes, I do. But last I knew they only distributed security patches (between distribution releases) as source code, so if you want the latest fixes you have to compile from source. It's possible this changed -- I still run FreeBSD, but I haven't looked at NetBSD lately.

On the plus side, security fixes to the base system are fairly uncommon in *BSD -- since FreeBSD 6.2 was released in January, there have only been six of them, for example.




--
To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx

Relevant Pages

  • Re: Sound not working on laptop
    ... > Thanks for everyone who helped (and is helping me) to find my ... > way in the great world of FreeBSD. ... I don't think you need to recompile. ... To unsubscribe, ...
    (freebsd-questions)
  • LD_ *vars
    ... I want to modify and recompile an application already installed on my ... FreeBSD 4.10 machine and then when I'm done with it go back to the way ... To unsubscribe, ...
    (freebsd-questions)
  • Degrade, upgrade
    ... I have a system running FreeBSD 5.2.1 and want to degrade it ... Is it enough to cvsup to the RELENG_4 branch and recompile ... To unsubscribe, ...
    (freebsd-stable)
  • HELP! core dumps: install, mtree, et cetera all of the sudden after portmaster security/cyrus-sa
    ... FreeBSD 9.1-PRE and FreeBSD 10-CURRENT (build of ... the installation of the port security/cyrus-sasl2 ... I can not find install or mtree. ... If someone has some hints how to recompile the sources with an emergency ...
    (freebsd-questions)
  • HELP! core dumps: install, mtree, et cetera all of the sudden after portmaster security/cyrus-sa
    ... FreeBSD 9.1-PRE and FreeBSD 10-CURRENT (build of ... the installation of the port security/cyrus-sasl2 ... I can not find install or mtree. ... If someone has some hints how to recompile the sources with an emergency ...
    (freebsd-current)