FreeBSD Security Advisory FreeBSD-SA-13:05.nfsserver

Chris Rees utisoft at gmail.com
Tue Apr 30 16:26:26 UTC 2013


On 30 Apr 2013 05:24, "Glen Barber" <gjb at freebsd.org> wrote:
>
> On Mon, Apr 29, 2013 at 10:16:43PM -0600, Brett Glass wrote:
> > At 09:46 PM 4/29/2013, Glen Barber wrote:
> >
> > >This has _always_ been the case with freebsd-update(8).
> >
> > Should it be?
>
> Yes.  freebsd-update(8) does not, and cannot, know of custom kernel
> configurations.
>
> > It seems to me that the current behavior
> >
> > a) Violates POLA; and
> >
>
> Wrong.  Users that build a custom kernel are responsible for maintaining
> the custom kernel for upgrades.
>
> > b) Puts any system with a custom kernel at serious risk if
> >    surgery and/or a kernel rebuild is not done prior to the
> >    next reboot. If there's a power failure, the system may
> >    well not come up.
>
> Wrong.  Previous statement applies.

I agreed with Glen, but when checking the docs it turns out that they say
that freebsd-update will detect a kernel in /boot/GENERIC:

http://www.freebsd.org/doc/handbook/updating-upgrading-freebsdupdate.html

Are the docs wrong, or is this only in new freebsd-update?

Chris


More information about the freebsd-security mailing list