Very Computer

by **Dustin Sander** » Mon, 26 May 1997 04:00:00

How secure is Linux v2.0.29? What did the patches after that fix.
Thanks
Dustin Sanders, Information Systems Manager
Pulsar Corp.

by **Albert D. Cahal** » Tue, 27 May 1997 04:00:00

> How secure is Linux v2.0.29? What did the patches after that fix.

I think 2.0.30 lets you enable enable protection against
a denial-of-service attack. (the SYN attack) You need some
other adjustments to take advantage of that.

Mostly though, any holes will be found _outside_ the kernel
in your daemons and suid programs. Example: sendmail.
Check with your vendor (Red Hat, Debian, Slackware...)
for issues that affect you.
--
--
Albert Cahalan <acahalan at cs.uml.edu> My address may be mangled to
avoid junk email. Please check it if you wish to respond to a news post.

by **Eric Sche** » Tue, 27 May 1997 04:00:00

>> How secure is Linux v2.0.29? What did the patches after that fix.

>I think 2.0.30 lets you enable enable protection against
>a denial-of-service attack. (the SYN attack) You need some
>other adjustments to take advantage of that.

A small correction. Yes, 2.0.30 includes protoction against SYN flooding.

However, it is NOT necessary to make any changes to user land
programs to take advantage of the protection. There was an
earlier kernel patch that required you to enlarge the backlog
queues to take advantage of the fix. This fix was a random
drop fix. The solution in 2.0.30 is a crytographic cookie approach
that requires no information to be stored on the machine
under attack, and requires no changes to the size of the
backlog queues on the machine under attack.

--
Eric Schenk www: http://www.dna.lth.se/~erics

Box 118, S-221 00 LUND, Sweden fax: +46-46 13 10 21 ph: +46-46 222 96 38

Very Computer

2.0.29 security

2.0.29 security

2.0.29 security

2.0.29 security