Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 18 Apr 2002 19:12:54 -0600
From:      Nate Williams <nate@yogotech.com>
To:        Benjamin Krueger <benjamin@macguire.net>
Cc:        Nate Williams <nate@yogotech.com>, Jeff Palmer <scorpio@drkshdw.org>, freebsd-security@FreeBSD.ORG
Subject:   Re: FreeBSD Security Advisory FreeBSD-SA-02:21.tcpip
Message-ID:  <15551.28438.662471.593081@caddis.yogotech.com>
In-Reply-To: <20020418180846.F23267@rain.macguire.net>
References:  <4.3.2.7.2.20020417230144.032ad390@nospam.lariat.org> <200204171923.g3HJNga58899@freefall.freebsd.org> <4.3.2.7.2.20020418095356.024354c0@nospam.lariat.org> <012901c1e725$da237e90$0286a8c0@jeffrey> <20020418154338.D23267@rain.macguire.net> <15551.27877.743534.149538@caddis.yogotech.com> <20020418180846.F23267@rain.macguire.net>

next in thread | previous in thread | raw e-mail | index | archive | help
> > > FreeBSD currently does not enable easy maintainance between critical release
> > > points for large server environments. Using cvsup to maintain source builds
> > > for environments like these ( say 400 servers or more ) is not only 
> > > unacceptable without an on staff developer and release engineer, it is 
> > > infeasible. 
> > > 
> > > For those of you who would be quick to note that "Corporations with
> > > 400 servers should be able to afford a developer and release engineer"
> > > please note that 400 NT, Solaris, AIX, or HP-UX servers can be
> > > maintained by a small team of administrators, and do not require these
> > > extra resources.
> > 
> > So, for 400 NT, Solaris, AIX, or HP-UX servers you allow a small team,
> > and for FreeBSD you don't even allow a single engineer?  Seems kind of a
> > double standard.
> > 
> > And as a long-time administrator, I disagree that FreeBSD is more
> > difficult to maintain releases across systems.  I've done Ultrix, SunOS,
> > Solaris, FreeBSD, and (ack!) Linux, and I find that FreeBSD is second to
> > Solaris, but barely so.
> > 
> > However, Solaris doesn't even provide anything remotely close to what
> > Brett is asking, and they're getting paid alot for the OS than FreeBSD
> > is getting paid.
> > 
> > Nate
> 
> I think you misunderstood. I meant you don't need release engineers for
> any of the above, only FreeBSD. FreeBSD might be great, but it doesn't admin
> itself yet. ;)  Consider 4 sysadmins, and 2 release engineers for FreeBSD, as
> opposed to just 4 sysadmins for NT / Solaris / AIX / HP-UX.

Call it what you like, but I consider preparing/testing a release for
our configuration part of the 'sysadmin' job.  Certainly the IS staff at
my company does hardware/software verification as part of their job, on
*all* platforms (including Win98/NT/Win2K/WinME/XP, along with all of
the *nix variants).

If it makes you feel better, use the title 'release engineer', but the
staff of 4 people should be more than adequate to do all of the tasks
necessary to support your installations, regardless of whether FreeBSD
is used or not.


Nate

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?15551.28438.662471.593081>