OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Heikki Korpela (hekoiki.fi)
Date: Thu Sep 06 2001 - 09:29:43 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    > I am just estimating *my* effort for porting software, and looking at
    > porting.html and checklist.html this is NOT just some patches 'til it
    > "compiles".

    There are a few things I'd consider:

            - how useful the port is?

            - is there another alternative for it?

            - do you use it yourself? how often? on what architechtures?
              do you tweak the configuration a lot?

            - are you going to be in touch with the actual authors of the
              software to deal with possible problems with them?

            - what privileges does the port typically possess?

            - does the port have sufficient documentation about how to
              handle security issues?

            - is the port a daemon? does it interact with the network at all?

            - what can be compromised if the port has a flaw in it?

            - do you subscribe to bugtraq and other such forums?