This is a discussion on RE: Compile problem within the IPFilter forums, part of the System Security and Security Related category; --_3ab27ac4-0ae4-4e1d-b184-48d88bc0840c_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable &...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
--_3ab27ac4-0ae4-4e1d-b184-48d88bc0840c_
Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable > > By the way, does anyone know whether I apply the Solaris8 package to > > a Solaris9 system, or I necessarily have to build a Solaris9 specific > > package? >=20 > It's kernel code, so it is extremely unlikely to work against a=20 > different OS release. It frequently breaks on major kernel patches. That's correct. The problem was that IPF was accessing private kernel struc= tures and interfaces which were not guaranteed to be stable; so for example= , applying a recommended patch cluster would cause the kernel to panic when= the IPF module was loaded. To avoid this, a recompile of IPF was required = every time a kernel patch was applied. Work was in progress to rectify this by building public API infrastructure = for IPF. What the status of this project is, only Darren can probably say. Personally, I would also be interested to know what the status of this proj= ect is. pfil hooks used to be required, but I don't believe that to be the = case in the newest "Nevada" builds. Darren? __________________________________________________ _______________ Explore the seven wonders of the world http://search.msn.com/results.aspx?q...n-US&form=3DQ= BRE= --_3ab27ac4-0ae4-4e1d-b184-48d88bc0840c_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html> <head> <style> ..hmmessage P { margin:0px; padding:0px } body.hmmessage { FONT-SIZE: 10pt; FONT-FAMILY:Tahoma } </style> </head> <body class=3D'hmmessage'> > > By the way, does anyone know whether I apply the Solaris8 package= to<br>> > a Solaris9 system, or I necessarily have to build a Solari= s9 specific<br>> > package?<br>> <br>> It's kernel code, so it = is extremely unlikely to work against a <br>> different OS release. It f= requently breaks on major kernel patches.<br><br>That's correct. The proble= m was that IPF was accessing private kernel structures and interfaces which= were not guaranteed to be stable; so for example, applying a recommended p= atch cluster would cause the kernel to panic when the IPF module was loaded= .. To avoid this, a recompile of IPF was required every time a kernel patch = was applied.<br><br>Work was in progress to rectify this by building public= API infrastructure for IPF. What the status of this project is, only Darre= n can probably say.<br><br>Personally, I would also be interested to know w= hat the status of this project is. pfil hooks used to be required, but I do= n't believe that to be the case in the newest "Nevada" builds.<br><br>Darre= n?<br><br /><hr />Explore the seven wonders of the world <a href=3D'http://= search.msn.com/results.aspx?q=3D7+wonders+world&mkt=3Den-US&form=3DQBRE' ta= rget=3D'_new'>Learn more!</a></body> </html>= --_3ab27ac4-0ae4-4e1d-b184-48d88bc0840c_-- |