Slashdot Mirror

← Back to Stories (view on slashdot.org)

NetBSD 2.0.2 Released

Posted by CowboyNeal on from the dreamcasts-rejoice dept.

jschauma writes "James Chacon of the NetBSD Release Engineering team has announced that update 2.0.2 of the NetBSD operating system is now available. NetBSD 2.0.2 is the second security/critical update of the NetBSD 2.0 release branch. This represents a selected subset of fixes deemed critical in nature for stability or security reasons. More details are available in the NetBSD 2.0.2 Release Announcement."

5 of 36 comments (clear)

  1. Re:I wonder... by Anonymous Coward · · Score: 4, Informative

    I don't know what Halo is, but NetBSD security upgrades (2.0.x), and even minor upgrades (2.x), normally are 100% backward compatible.

    Backward compatibility across major versions (for 1.5, 1.6. ...) can be enabled in the kernel, using e.g. the COMPAT_16 option.

  2. Re:So, speaking of security, by Anonymous Coward · · Score: 4, Informative

    You may be thinking of systrace.

  3. Re:So, speaking of security, by Anonymous Coward · · Score: 3, Informative

    On all BSD's you can set the lowest "unprivileged bindable" port by means of a sysctl.

  4. Re:So, speaking of security, by Anonymous Coward · · Score: 2, Informative

    or, you can redirect the port to a higher number by using NAT.

  5. Re:So, speaking of security, by Homology · · Score: 4, Informative
    So, what's the consensus been about the experience with this. Has it proven to be a huge improvement in security?

    Writing systrace policies are alot of work, and requires much testing in order not to break the application. In addition you need knowledge of the system calls involved (pass/deny).

    As an example "mv a /b" involves different system calls depending on a is on same filesystem as /b.