Rolf Weber <weber @
iez .
com> replies
>> I think perhaps my point wasn't made clearly. The firewall can
>> only be as good as the OS on which it exists. If your firewall
>> is an application on top of an OS, I can break the firewall by
>> breaking the OS.
>>
>i never heard of any breakin possible because of a kernel bug.
>may be i'm wrong, may be it's possible, but i cannot imagine.
Surely at least some of the patches released by Sun etc address kernel bugs
with security implications?
it may not have been running a firewall, but about a year ago a well known
developer of Internet software took even more security precautions after
his public ftp host was broken in via what was described as a kernel bug in
BSDi.
I'm sure that bug got fixed quickly.
cheers,
Danny Thomas <D .
Thomas @
vthrc .
uq .
edu .
au>
|
|
