[OpenIndiana-discuss] Proposal: OpenIndiana Stable Branch
Jesus Cea
jcea at jcea.es
Wed Jan 26 11:48:20 UTC 2011
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 26/01/11 04:22, Ken Gunderson wrote:
> Sure, the *BSD ship with Sendmail, but that is mostly for historical
> reasons and that nobody wants to get into a holy war as to what a more
> modern default should be. At the time Debian opted for Exim, Sendmail
> was one security exploit after another waiting to happen, Postfix was
> not yet in existence and Qmail, the other potential contender, had an
> unacceptable license. Several Linux distributions ship with Postfix.
> Just because Oracle makes a poor decision and ships Sendmail doesn't
> mean OI necessarily has to follow, no?
Well, it has been ages since the last sendmail remote exploit, but I
personally know quite a few guys rebuilding servers after being
exploited thru Exim (just days -a week?- ago).
OI 148 uses sendmail. The stable release should be minimal change,
security fixes only. Any extra developer will be used to integrate Illumos.
If a 3th party provides a postfix replacement for sendmail, perfect. But
do not delay 148+support for the sake of it.
PS: I personally use postfix too.
- --
Jesus Cea Avion _/_/ _/_/_/ _/_/_/
jcea at jcea.es - http://www.jcea.es/ _/_/ _/_/ _/_/ _/_/ _/_/
jabber / xmpp:jcea at jabber.org _/_/ _/_/ _/_/_/_/_/
. _/_/ _/_/ _/_/ _/_/ _/_/
"Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/
"My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/
"El amor es poner tu felicidad en la felicidad de otro" - Leibniz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iQCVAwUBTUAKBJlgi5GaxT1NAQK0FAP/YqG7N+vxmWfHP70c023VuHmk28WtNeVO
a9RR94z1lAZyJpu03rURazjsPw/Av8XNSCSqBcBE4G2HEubTsSbBg7phoQ27b9KZ
UWeEGt+WZlgy3A2GreESSjSWEchalezFKLFxNWYKdDBEd96oLVxbJPr24JiP5QB9
o5JYLeAVPh4=
=RNIN
-----END PGP SIGNATURE-----
More information about the OpenIndiana-discuss
mailing list