Re: [fw1-gurus] Linux kernel version

["Volker Tanger" <volker.tanger@xxxxxxxxx>]

Greetings!

> What version of Linux kernel is recommended to new installation of
> Firewall-1 AI R55?

There is a quite thorough article in the current release of the (German
language) iX magazine (http://www.heise.de/ix/inhalt.shtml). The article
reflects what I found from in test installations: the security/hardening
of the SecurePlatform is less than optimum, featuring quite some
outdated programs (read: with a number of known & published exploits)
and a number superfluous system programs. It's based on a not overly
modified RedHat 7.2 (yes: seven dot two). Kernel is a 2.4.9 IIRC

 
> What do you advise me to do? Should I turn to Secure Platform? What
> kernel version do you use in your machines? I *really* want to hear
> your thoughts and recommendations on this issue!

SPLAT is better supported by CKP than a self-installed Linux (which
probably is not at all). Hardening the SPLAT is much harder than setting
up your own, though...

Bye

Volker Tanger
ITK-Security


     


---------------------------------------------------------------------
FireWall-1 Gurus Mailing List (http://www.phoneboy.com/gurus)
To unsubscribe, mailto:fw1-gurus-unsubscribe@xxxxxxxxxxxxxxxxxx
For additional commands, mailto:fw1-gurus-help@xxxxxxxxxxxxxxxxxx