Re: Reasonable expectations of sysadmins
- From: Matthew Franz <mdfranz@xxxxxxxxx>
- Date: Tue, 11 Oct 2011 05:32:46 -0400
I've found this to be especially useful on PF+CARP pairs when making
networking changes. Did the interfaces come up properly, did the
routes, did the PF rules upon reboot?
In some virtualized (non-BSD) environments some folks rebuild the
image from scratch from packages and from a source of truce
(puppet/chef repo) to be sure you can always have a clean build.
- mdf
2011/10/11 Dag-Erling Smørgrav <des@xxxxxx>:
Mike Brown <mike@xxxxxxxx> writes:
Also, sometimes things go haywire after a reboot, especially after extended
uptime and updates to the kernel or core libraries, so I'm in the habit of
only shutting down when necessary. So if I don't see "and then reboot" in an
update procedure - and most of the time, security updates don't require it -
then I don't do it.
Actually, this is an argument in favor of rebooting regularly, or at
least after every major change, so you know the server will boot
unassisted if something happens (power outage, cleaning staff tripped
over the mains cable, etc.) I once spent an entire evening coaxing a
mission-critical database server back up after a simple disk replacement
because a predecessor had performed an in-place system upgrade without
verifying that the new configuration would boot cleanly.
DES
--
Dag-Erling Smørgrav - des@xxxxxx
_______________________________________________
freebsd-security@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@xxxxxxxxxxx"
--
--
Matthew Franz
mdfranz@xxxxxxxxx
_______________________________________________
freebsd-security@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@xxxxxxxxxxx"
- References:
- Reasonable expectations of sysadmins (was Re: FreeBSD Security Advisory FreeBSD-SA-11:05.unix)
- From: Mike Brown
- Re: Reasonable expectations of sysadmins
- From: Dag-Erling Smørgrav
- Reasonable expectations of sysadmins (was Re: FreeBSD Security Advisory FreeBSD-SA-11:05.unix)
- Prev by Date: Re: Reasonable expectations of sysadmins
- Next by Date: Re: Reasonable expectations of sysadmins
- Previous by thread: Re: Reasonable expectations of sysadmins
- Next by thread: Re: Reasonable expectations of sysadmins
- Index(es):
Relevant Pages
|