LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices



Reply
 
Search this Thread
Old 03-14-2003, 05:44 AM   #1
wincrk
Member
 
Registered: Feb 2003
Distribution: Redhat 9.0
Posts: 104

Rep: Reputation: 15
security hole in previous linux releases?


hi,
i am not so good in this field, didn't have much knowledge iether.
i wonder is there any possibility for my system to be hacked is i am using the perivious release of linux such as redhat 5.0 or 6.0?

this is important to me because i am planning to install a old linux system (probably redhat 5) on an old PC.

if there are possibility... could i prevenge those possibility?
 
Old 03-14-2003, 10:46 AM   #2
paranoid
LQ Newbie
 
Registered: Mar 2003
Location: Never more than 30 seconds from a keyboard
Distribution: Debian by choice, RH for Work, *BSD on and off
Posts: 13

Rep: Reputation: 0
If you open it up to a network, yes, I'd say your RedHat 5.0 will be cracked into very quickly.

Even the latest releases of RedHat already have security patches out, for example anyone who can choose the name of a file on your system can manage to execute code as the first person to try a `find / -print0 | xargs -0 file`, which is rather common behaviour for a systems administrator.

If you don't connect it to some kind of network and you let nobody into the room, well... but why?

You can put a firewall that will allow you to go out, and nobody to come in, but even so there are risks!

Why do you want to install an old RedHat? You can install a new RedHat even on PCs that are ten years old... it's not as if you had to *buy* the new version.
 
Old 03-15-2003, 06:49 PM   #3
Grim Reaper
Member
 
Registered: Apr 2002
Distribution: Gentoo 2006.0 AMD64
Posts: 399

Rep: Reputation: 30
Just a side note, where did you get that copy of the old distro's?

I'm looking for some really old copies and cant find any ISO's, etc for the old distro's...I wanna install one on a test box here and have some fun...a good way to learn about security, etc
 
Old 03-16-2003, 10:01 PM   #4
wincrk
Member
 
Registered: Feb 2003
Distribution: Redhat 9.0
Posts: 104

Original Poster
Rep: Reputation: 15
thanks paranoid,

but is that true that i can install a new RedHat even on PCs that are ten years old? isn't that could slow down the performance of that old PC? i dont want to wait 10 minutes for a simple job... even i dont have to but the new version, but how about the performance?
 
Old 03-16-2003, 10:03 PM   #5
wincrk
Member
 
Registered: Feb 2003
Distribution: Redhat 9.0
Posts: 104

Original Poster
Rep: Reputation: 15
Grim Reaper, about the copy of old distro's... i got it from my friend. he get into this field long time ago, so he got have all of that CD. i just copied from him. before this, every problem of mine will be solved by him, but now he's not around anymore.
 
Old 03-17-2003, 03:37 AM   #6
paranoid
LQ Newbie
 
Registered: Mar 2003
Location: Never more than 30 seconds from a keyboard
Distribution: Debian by choice, RH for Work, *BSD on and off
Posts: 13

Rep: Reputation: 0
How much RAM on your old PC? Forget about the rest...

Do put at least 128 MB of swap though, if you don't have a lot of RAM.

It's not the newness of the distribution in itself that will slow down the computer. In the last ten years the Linux kernel has got bigger, a lot of other things have got bigger; that reflects on RAM only. 2MB of RAM wasn't enough even for 1995 Slackware, believe me :-)

If you're not installing X, and have 16MB of RAM, go for the new distro, no question about it.

If you want X, and have 64 MB of Ram or less, the problem will be more client apps like mozilla and such, that want LOTS of RAM. That probably won't be much better with old distros, and anyway the client apps are what YOU want !

A new RedHat will probably want to install KDE/GNOME with more bells and whistles than you want, but when I installed RH8.0 the other day the installer asked me about the performance level of my PC and whether I wanted the icons to change when the mouse moved over them and such new-fangled things. Other window managers take up much less CPU and RAM.

You want to play with Linux? You'll want an up-to date distribution to be able to install recent software... In Microsoft world, a program will run under Windows 95 or later, but in Linux world a programmer will say "hey, that new lib will save me hours of work", and bingo the software he writes will need that lib, which will somehow need Linux (kernel) 2.2 or later, and there you are.

I'd say (I did say :-)) go for the new distro, and if it's a bit slow look at what can be done to accelerate things (stripping, kernel recompiling without unnecessary things, less hungry apps); if you're installing Linux to play with and to learn that will be an excellent first subject, much better than "how do I get this new software to run on my old distro without upgrading" :-)
 
Old 03-17-2003, 03:39 PM   #7
nakkaya
Guru
 
Registered: Jan 2003
Location: Turkey&USA
Distribution: Emacs and linux is its device driver(Slackware,redhat)
Posts: 1,398

Rep: Reputation: 45
you can check redhat s ftp or mirros for old dist they have.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
NSA Releases High Security Version Of Linux jeremy Linux - Security 3 03-28-2005 08:24 AM
check the security hole ust Linux - Security 6 09-10-2004 06:42 PM
panther security hole??? feetyouwell General 5 04-19-2004 11:03 AM
security hole or convenience? carboncopy Slackware 3 08-13-2003 04:07 AM
Security Hole -Samba dvong3 Linux - Security 1 03-21-2003 03:38 PM


All times are GMT -5. The time now is 05:14 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration