LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 05-04-2008, 03:43 AM   #1
guy24x
Member
 
Registered: Jan 2005
Location: Bangalore /India
Distribution: Mandrake 10.1 Official, Simply Mepis 3.3.1-1
Posts: 45

Rep: Reputation: 15
is it safe running slackware 10.1 now, security-wise?


hi all,
i have the slackware 10.1 install CDs (which i made 2 years ago),and i want to install it on a spare hdd i have, and use it as my primary desktop os. is it safe to use slack 10.1 now, security-wise? i am not willing to spend time upgrading packages, or apps, right now, because i am focused on other things right now. i will be primarily using the system for web browsing (firefox), listening to music (xmms), using my printer (hp laserjet 1010) and scanner (hp scanjet 2400), and <perhaps> some chatting (xchat or gaim or similar). i will be using kde as the front-end. is it safe to go ahead and run slack 10.1 as it is, without any modifications? if not, what are your suggestions, so that it involves the least work for me? i dont have the cash to buy the slack 12.1 CDs, nor is my dsl connection fast enough to download 12.1.

thanks,
guy24x
 
Old 05-04-2008, 03:45 AM   #2
Smedley
Registered User
 
Registered: Apr 2008
Distribution: Slackware
Posts: 74

Rep: Reputation: 15
Shouldn't be a problem, just make sure you get all the updates for 10.1, example:

http://slackware.oregonstate.edu/sla...ches/packages/
 
Old 05-04-2008, 07:29 AM   #3
guy24x
Member
 
Registered: Jan 2005
Location: Bangalore /India
Distribution: Mandrake 10.1 Official, Simply Mepis 3.3.1-1
Posts: 45

Original Poster
Rep: Reputation: 15
smedley,

are you saying that i have to manually download <all> of those packages and install every one of them, if i have to be safe in terms of security? i mean, is it possible to run an older version of slack, without any updates, and still be safe?

thanks,
guy24x
 
Old 05-04-2008, 07:34 AM   #4
mRgOBLIN
Slackware Contributor
 
Registered: Jun 2002
Location: New Zealand
Distribution: Slackware
Posts: 999

Rep: Reputation: 231Reputation: 231Reputation: 231
Yes to be safe you should install the security updates found in the patches/ directory.

Something like slackpkg (in extra) will make this very easy.
 
Old 05-04-2008, 08:24 AM   #5
T3slider
Senior Member
 
Registered: Jul 2007
Distribution: Slackware64-14.1
Posts: 2,367

Rep: Reputation: 843Reputation: 843Reputation: 843Reputation: 843Reputation: 843Reputation: 843Reputation: 843
You could also use rsync to download all of the packages. And to be clear: when security vulnerabilities are found in packages released with a Slackware release (like 10.1), Pat either patches or upgrades the package to fix the vulnerability. Therefore, if you want to be safe and secure with 10.1, you HAVE to download/install all of those packages.

It has been said that security is a process, not a product. Pat tries to release a very stable Slackware release, and he does -- but vulnerabilities can be found in just about anything, and it's a good thing he tracks them and provides updated packages, or else I'd have to do it manually.

Last edited by T3slider; 05-04-2008 at 08:25 AM.
 
Old 05-04-2008, 10:35 AM   #6
guy24x
Member
 
Registered: Jan 2005
Location: Bangalore /India
Distribution: Mandrake 10.1 Official, Simply Mepis 3.3.1-1
Posts: 45

Original Poster
Rep: Reputation: 15
thanks smedley, mrgoblin and t3slider,

i will install slack 10.1 on the spare hdd, and use slackpkg to upgrade. thanks a lot, wish me luck

regards,
guy24x
 
Old 05-05-2008, 11:56 AM   #7
guy24x
Member
 
Registered: Jan 2005
Location: Bangalore /India
Distribution: Mandrake 10.1 Official, Simply Mepis 3.3.1-1
Posts: 45

Original Poster
Rep: Reputation: 15
if i install slack 10.1 and run the following commands:

# slackpkg update
# slackpkg install-new
# slackpkg upgrade-all
# slackpkg clean-system

would it be me practically having installed slack 12.1 ?

i'm a bit nervous to go ahead with this step, so i'm asking. after this process, would it mean that i would have the version of (say) xmms that ships with slack 12.1?

thanks,
guy24x
 
Old 05-05-2008, 12:03 PM   #8
XavierP
Moderator
 
Registered: Nov 2002
Location: Kent, England
Distribution: Debian Testing
Posts: 19,192
Blog Entries: 4

Rep: Reputation: 475Reputation: 475Reputation: 475Reputation: 475Reputation: 475
Read the UPGRADE.TXT file before doing any updating. There are a few steps you need to go through before doing a mass update - it will save you from huge headaches later on.
 
Old 05-05-2008, 01:19 PM   #9
guy24x
Member
 
Registered: Jan 2005
Location: Bangalore /India
Distribution: Mandrake 10.1 Official, Simply Mepis 3.3.1-1
Posts: 45

Original Poster
Rep: Reputation: 15
but xavier, the upgrade.txt file says it explains how to upgrade from slack 10.0 to 10.1. but i want to upgrade from slack 10.1 to slack 12.1. what do you suggest?
 
Old 05-05-2008, 01:31 PM   #10
chess
Member
 
Registered: Mar 2002
Location: 127.0.0.1
Distribution: Slackware and OpenBSD
Posts: 740

Rep: Reputation: 190Reputation: 190
I may be wrong, but I do not believe you can easily go from 10.1 to 12.1 and, in fact, I do not believe this is supported. You would need to go incrementally from one release to the next until you get to 12.1.
 
Old 05-05-2008, 01:50 PM   #11
T3slider
Senior Member
 
Registered: Jul 2007
Distribution: Slackware64-14.1
Posts: 2,367

Rep: Reputation: 843Reputation: 843Reputation: 843Reputation: 843Reputation: 843Reputation: 843Reputation: 843
Your best bet would be to back everything up and install fresh (maybe you could keep your /home partition intact if you use one). Upgrading from 10.1 to 12.1 will almost certainly break something in the process -- you'd have to upgrade from 10.1 to 10.2, then from 10.2 to 11.0, then from 11.0 to 12.0, then 12.0 to 12.1 -- which is a LOT of work (and the 11.0 to 12.0 upgrade is a big one since a LOT changes between those two releases, especially the kernel version). You're going to have a lot or work ahead of you if you do decide to upgrade.
 
Old 05-05-2008, 02:11 PM   #12
guy24x
Member
 
Registered: Jan 2005
Location: Bangalore /India
Distribution: Mandrake 10.1 Official, Simply Mepis 3.3.1-1
Posts: 45

Original Poster
Rep: Reputation: 15
yikes! thanks a lot, t3slider, maybe i have to figure out if i'm up to downloading the 12.1 iso's. thanks a ton !

-guy24x
 
Old 05-05-2008, 02:48 PM   #13
XavierP
Moderator
 
Registered: Nov 2002
Location: Kent, England
Distribution: Debian Testing
Posts: 19,192
Blog Entries: 4

Rep: Reputation: 475Reputation: 475Reputation: 475Reputation: 475Reputation: 475
Apologies, I had too many tabs open. Going from 10.1 to 12.1 is possible but involves upgrading to each subsequent version - 10.1, 11.0 and so on to avoid breakages. Do what T3slider said and install 12.1 fresh.

Probably not a bad idea regardless - if you've been running for a while you will probably have orphaned files and lots of .bak files where you've made mistakes - I know I do!
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Safe to install on laptop running Vista? hazmat54 Zenwalk 7 11-13-2007 12:40 AM
Where do you generally put custom shell scripts (security-wise)? BILMO Linux - Security 3 01-18-2007 01:23 AM
Kanotix has many processes running, which are safe to disable? Russ S. Linux - Newbie 3 06-22-2006 07:42 AM
Security - to be safe on slackware 10.2 Hondro Slackware 10 03-29-2006 06:43 PM
bandwidth allocation by user wise and ip wise basbosco Linux - Networking 1 11-12-2003 02:54 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 08:57 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration