Re: FreeBSD Patch question

From: Pawel Jakub Dawidek (nick_at_garage.freebsd.pl)
Date: 09/26/03

  • Next message: Mike Tancsa: "Re: OpenSSH: multiple vulnerabilities in the new PAM code"
    Date: Fri, 26 Sep 2003 16:39:35 +0200
    To: Robert Watson <rwatson@freebsd.org>
    
    
    

    On Thu, Sep 25, 2003 at 04:13:30PM -0400, Robert Watson wrote:
    +> > I administer a remote server and want to apply some of the security
    +> > patches. (I assume this is the best way to go since I can't go into
    +> > single-user mode to use CVsup).
    +>
    +> I generally follow the following practice:
    +>
    +> cvsup in multiuser
    +> buildworld in multiuser
    +> buildkernel in multiuser

    IMHO installkernel in multiuser is safe to as long as you don't need to
    load any kernel modules after this step.

    -- 
    Pawel Jakub Dawidek                       pawel@dawidek.net
    UNIX Systems Programmer/Administrator     http://garage.freebsd.pl
    Am I Evil? Yes, I Am!                     http://cerber.sourceforge.net
    
    



  • Next message: Mike Tancsa: "Re: OpenSSH: multiple vulnerabilities in the new PAM code"

    Relevant Pages

    • Re: FreeBSD Patch question
      ... Subject: FreeBSD Patch question ... > buildworld in multiuser ... > release/patch branch, you can cvsup forward to the head of the branch, ... > which kernel to run at boot, even have multiple root file systems ...
      (FreeBSD-Security)
    • Re: FreeBSD Patch question
      ... buildworld in multiuser ... single-user after the first reboot, mount -a, swapon, and proceed. ... > ports to verify the patches. ... PGP relies on a "web of trust". ...
      (FreeBSD-Security)