看板FB_security
标 题Re: FreeBSD Security Advisory FreeBSD-SA-13:05.nfsserver
发信站NCTU CS FreeBSD Server (Wed May 1 01:15:31 2013)
转信站ptt!csnews.cs.nctu!news.cs.nctu!.cs.nctucs.nctu!!freebsdfreebsd.org!ow
--XsQoSWH+UP9D9v3l
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Tue, Apr 30, 2013 at 01:36:52PM -0600, Brett Glass wrote:
> This is one of several reasons why one would expect freebsd-update(8) to =
be
> considerate of a custom kernel: it is documented as knowing about
> /boot/GENERIC as the place to put he GENERIC kernel if one builds a
> custom one.
>=20
Let's start from the beginning. What is the name of your custom kernel?
Glen
> Also, I don't think that freebsd-update(8) should, in the course of a nor=
mal
> update, create a situation where the system is not be able to reboot. This
> would have been the case with the system I updated, had I not caught
> the problem.
>=20
> I daresay that a system that stops working after a routine update is
> a violation
> of POLA. ;-)
>=20
> In my case, the GENERIC kernel was installed in place of the custom
> one, without
> modules the system needed -- in either loadable or built-in form. It's ea=
sy to
> prevent this by modifying /boot/GENERIC (which freebsd-update is
> supposed to know
> about) instead of overwriting the custom kernel... and then advising the
> administrator that a new build might be needed.
>=20
> --Brett Glass
>=20
> At 10:26 AM 4/30/2013, Chris Rees wrote:
>=20
> >I agreed with Glen, but when checking the docs it turns out that they say
> >that freebsd-update will detect a kernel in /boot/GENERIC:
> >
> >http://www.freebsd.org/doc/handbook/updating-upgrading-freebsdupdate.html
> >
> >Are the docs wrong, or is this only in new freebsd-update?
> >
> >Chris
> >_______________________________________________
> >[email protected] mailing list
> >http://lists.freebsd.org/mailman/listinfo/freebsd-security
> >To unsubscribe, send any mail to "[email protected]=
rg"
--XsQoSWH+UP9D9v3l
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (FreeBSD)
iQEcBAEBCAAGBQJRgDRzAAoJEFJPDDeguUajkAIH/09p5KEJeERfmK9b05Im/aep
wbFVSXJR2r0IYzYy8tXvJsgzfil9Y18FfH8MHdp58imHS+8ExngJo2qMaWATJJBb
r8ywdFcc7tP4dKuCzjWGCjw/e54pSaVN7SANYFZhLslYaI4gHO/E9qr5AxZ7eIzC
NwpUeIf/tnC4e3vfkN/whMxA1aFJ2OZcSMoAq+uQYgAlAXQCn93o00II1oMFM2rg
ria0T2PAZb0szF0AsNLprtEoslOEl6IoBPNQ/LLrzRtPdzwn4AkHLZN8/8kWnkYv
d4QNnWz4WQSgK8Ptq9+moY09+1t2jRjer/qyz9jG5aa8QNKeyHamZ3X+av6RHAg=
=wIWS
-----END PGP SIGNATURE-----
--XsQoSWH+UP9D9v3l--