From owner-freebsd-security@FreeBSD.ORG Sat Oct 1 06:32:29 2011 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx2.freebsd.org (mx2.freebsd.org [IPv6:2001:4f8:fff6::35]) by hub.freebsd.org (Postfix) with ESMTP id 32F4D1065691 for ; Sat, 1 Oct 2011 06:32:29 +0000 (UTC) (envelope-from dougb@FreeBSD.org) Received: from 172-17-198-245.globalsuite.net (hub.freebsd.org [IPv6:2001:4f8:fff6::36]) by mx2.freebsd.org (Postfix) with ESMTP id DF443205779; Sat, 1 Oct 2011 06:32:18 +0000 (UTC) Message-ID: <4E86B3F2.9040108@FreeBSD.org> Date: Fri, 30 Sep 2011 23:32:18 -0700 From: Doug Barton Organization: http://SupersetSolutions.com/ User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:7.0) Gecko/20110928 Thunderbird/7.0 MIME-Version: 1.0 To: Sean References: <201110010410.p914Ap3F001617@chilled.skew.org> <4E86A12E.3070600@FreeBSD.org> <8AC5D3E0-B0D0-412C-BCDF-D531C0116043@gothic.net.au> In-Reply-To: <8AC5D3E0-B0D0-412C-BCDF-D531C0116043@gothic.net.au> X-Enigmail-Version: undefined OpenPGP: id=1A1ABC84 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: freebsd-security@freebsd.org Subject: Re: FreeBSD Security Advisory FreeBSD-SA-11:05.unix X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 01 Oct 2011 06:32:29 -0000 On 09/30/2011 23:14, Sean wrote: > > On 01/10/2011, at 3:12 PM, Doug Barton wrote: > >> On 09/30/2011 21:10, Mike Brown wrote: >>> Eitan Adler wrote: >>>>> do I reboot for this one, or not? >>>> The kernel is changed, so yes. >>> >>> Thanks. I had guessed a reboot was needed, but the advisory only mentioned a >>> reboot in the context of building the kernel from sources. Hopefully, when a >>> reboot is required, future advisories will mention it in the freebsd-update(8) >>> instructions. >> >> When would a reboot not be needed for a kernel change? >> > > When it's a kernel module either not loaded, not compiled in, or can be unloaded/reloaded? I didn't say module, I said kernel. -- Nothin' ever doesn't change, but nothin' changes much. -- OK Go Breadth of IT experience, and depth of knowledge in the DNS. Yours for the right price. :) http://SupersetSolutions.com/