LWN.net Logo

Tails 0.20.1

Tails 0.20.1

Posted Sep 23, 2013 12:30 UTC (Mon) by spender (subscriber, #23067)
In reply to: Tails 0.20.1 by lkundrak
Parent article: Tails 0.20.1

Arguments about the "stable" part of Debian aside, since I've always been of the opinion (and I believe evidence supports) that following the latest-and-greatest is actually detrimental to security, as far as userland hardening goes, Debian is the worst or close to it. I can't tell you how many times I've upgraded a Debian system to find libcrypto.so marked with PT_GNU_STACK, which on a non-grsec kernel would have severe (yet silent) effects that I hopefully don't need to explain ;)

Here's another recent example: http://blog.cmpxchg8b.com/2013/08/security-debianisms.html

-Brad


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds