[H-GEN] Debian v Mandrake

[Anthony Towns]

On Thu, Mar 21, 2002 at 02:35:37PM +1000, Bradley Marshall wrote:
> On Thu, 21 Mar 2002, Anthony Towns wrote:
> > On Thu, Mar 21, 2002 at 01:37:07PM +1000, Bradley Marshall wrote:
> > > .. and most of which are application specific.  Its been
> > > quite a while since I've seen something for *nix that
> > > specifically targetted an OS, rather an an application.
> > Hrm? The flaws are application specific, but don't most of the exploits
> > need to be specific to the kernel ABI as well, so they can, eg, call
> > exec("/bin/sh") ?
> Sure, but its still a problem with the application, not the OS.
> Flaws that are specific to an OS are rare.

Yeah, but _attacks_ that are specific to an OS aren't, and attacks are
what you can log, and what Greg was claiming to be logging. Which seems
pretty fair. (Although identifying the OS that's being targetted is
probably a fair chunk harder than identifying the app. I for one'd be
interested to see how you might do that, or just what logging/analysis
people do in general...)

Cheers,
aj

-- 
Anthony Towns <aj at humbug.org.au> <http://azure.humbug.org.au/~aj/>
I don't speak for anyone save myself. GPG signed mail preferred.

  ``Debian: giving you the power to shoot yourself in each 
       toe individually.'' -- with kudos to Greg Lehey
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 350 bytes
Desc: not available
URL: <http://lists.humbug.org.au/pipermail/general/attachments/20020321/d63ec21d/attachment.sig>