Uhh yeah that works well if all you need is a stripped down kernel. For some bizarre reason a lot of people need features that SuSE rolls in. They also tend to appreciate SuSE's testing. As for apt-get/etc some would say not having it is a good thing as opposed to a problem. In any event getting apt-get on an rpm based system is pretty easy, go take a look at Conectiva's advisory (hint, the bit about using apt-get at the bottom...). As for TOC I think you mean TCO, and with tools such as ssh it's not exactly rocket science to run a command on several hundred machines to update something. Personally I dislike apt-get, the level of testing/etc done by Debian is a bit frightening. Kurt Seifried, seifried@securityportal.com Securityportal - your focal point for security on the 'net

----- Original Message ----- From: "Alexander Schwartz" <aschwartz@ccpsoft.de> To: "Markus Gaugusch" <markus@gaugusch.dhs.org> Cc: "Kurt Seifried" <listuser@seifried.org>; <suse-security@suse.com> Sent: Tuesday, May 15, 2001 3:30 AM Subject: [suse-security] Antwort: Re: [suse-security] Kernel security

I think SuSE has the problem that is uses a patched (enhanced) kernel with IPSEC etc. enabled that make it more complicated than necessary. There are distributions like debian who keep things simple and that came up with a recent kernel a long time ago.

Using debian, you can update your system with two command (apt-get update / apt-get upgrade) -- never seen that working on a SuSE-machine. Makes administration easy and reduces TOC.

Mit freundlichen Grüßen Alexander Schwartz