[Info-vax] Kernel Transplantation

[Arne Vajhøj]

On 1/18/2024 8:18 AM, Simon Clubley wrote:
> On 2024-01-17, Arne Vajhøj <arne at vajhoej.dk> wrote:
>> On 1/17/2024 8:11 AM, Simon Clubley wrote:
>>> BTW, has anyone been able to do a $ show proc/priv against the EVL listener
>>> PID and are you able to post the output ?
>>
>> Full priv on my VMS 8.4-2L2 Alpha and 9.2-1 x86-64.
> 
> Thank you for checking Arne. Seeing this still being the case on x86-64
> was an unpleasant surprise.
> 
> So, that's two full years VSI have had to look at this and they have
> done nothing.
> 
> I wonder if they are sitting on any other issues that are just a weakness
> at the moment, but may become an actual vulnerability if either further
> probing is done, or if another unrelated issue is discovered and these
> are chained together with that new issue.
> 
> For those of you with the premium support contracts who are worried about
> this, then a formal _polite_ request to VSI to answer the above question
> and to ask when the DECnet issues will be fixed might be in order.
> 
> You may have more luck getting them to fix these issues than I have had.

VSI has to prioritize engineering resources.

I think it would be hard to justify prioritizing DECnet
enhancements.

Customers will have to decide whether to drop DECnet
completely or perform sufficient mitigation to consider
the risk lowered to an acceptable level in their context.

Arne