Subject: Re: [vserver] kernel last security update for centos 5
From: jean-marc pouchoulon <jean-marc.pouchoulon@ac-montpellier.fr>
Date: Thu, 24 Apr 2008 13:47:06 +0200

Ok thanks a lot  for your two answers :-)

jean-marc

Daniel Hokka Zakrisson a écrit :
> Corey Wright wrote:
>   
>> On Thu, 24 Apr 2008 00:30:50 +0200 (CEST)
>> "Daniel Hokka Zakrisson" <daniel@hozac.com> wrote:
>>
>>     
>>> jean-marc pouchoulon wrote:
>>>       
>>>> helo all,
>>>>
>>>> This is not really a vserver question, but I'm sure the guys on this
>>>> list pay attention  on security Kernel.
>>>>  is  2.6.22.19 vserver kernel for centos 5, provides on  dhozac RPM
>>>> site  contains all the security fixes needed to be in a safe
>>>> environment ? I guess the answer is yes but I need to be sure.
>>>>         
>>> I don't know what security fixes you are referring to, but as far as I
>>> know are there no known issues with 2.6.22.19.
>>>       
>> i've been tracking oliver pinter's 2.6.22 git repositories (kernel source
>> tree [1] & patches [2]).  his 2.6.22.20 & 2.6.22.21 releases seem to only
>> include bugfixes [3] [4], but his 2.6.22.22, which he recently advertised
>> on lkml [5], mentions a security fix.
>>     
>
> No, it mentions a fix to the security subsystem (in this case,
> SELinux-hooks for splice).
>
>   
>> his patches for 2.6.22.20 & 2.6.22.21 both cleanly apply to
>> 2.6.22.19-vs2.2.0.7 (except for EXTRAVERSION in the Makefile, but that's
>> cosmetic & expected).  i haven't rebooted my server yet to run either
>> version, but i don't expect any problems when i do.
>>
>> [1] http://repo.or.cz/w/linux-2.6.22.y-op.git
>> [2] http://repo.or.cz/w/linux-2.6.22.y-op-patches.git
>> [3]
>> http://repo.or.cz/w/linux-2.6.22.y-op-patches.git?a=blob;f=patch-2.6.22.y/chlog-v2.6.22.20-op1
>> [4]
>> http://repo.or.cz/w/linux-2.6.22.y-op-patches.git?a=blob;f=patch-2.6.22.y/chlog-v2.6.22.21-op1
>> [5] http://lkml.org/lkml/2008/4/21/309
>>
>> corey
>> --
>> undefined@pobox.com
>>
>>     
>
>
>