Then become involved in the Debian project - Debian Linux tends to
install a lot less stuff SUID believing instead in a sane group structure.
A lot of problems mentioned on BUGTRAQ are just non-issues in Debian since
it will, for example, suggest you put people in group audio instead of
making audio apps SUID root (similarly, other groups like floppy, cdrom,
etc).
If you really think you have the time, sure, make a new distrib. But
chances are it would be much easier to help with another distribution
which is already quite secure and just start working on auditing that
code base [or those parts of the code base that differ from OpenBSD
first, since that's where the holes will more likely be].
David.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu