From owner-freebsd-stable@FreeBSD.ORG Fri Jul 1 07:06:46 2005 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D09B616A41C for ; Fri, 1 Jul 2005 07:06:46 +0000 (GMT) (envelope-from noackjr@alumni.rice.edu) Received: from smtp114.sbc.mail.mud.yahoo.com (smtp114.sbc.mail.mud.yahoo.com [68.142.198.213]) by mx1.FreeBSD.org (Postfix) with SMTP id 87E6143D1F for ; Fri, 1 Jul 2005 07:06:46 +0000 (GMT) (envelope-from noackjr@alumni.rice.edu) Received: (qmail 54987 invoked from network); 1 Jul 2005 07:06:46 -0000 Received: from unknown (HELO optimator.noacks.org) (noacks@swbell.net@70.240.197.70 with login) by smtp114.sbc.mail.mud.yahoo.com with SMTP; 1 Jul 2005 07:06:45 -0000 Received: from localhost (localhost [127.0.0.1]) by optimator.noacks.org (Postfix) with ESMTP id D922960F4; Fri, 1 Jul 2005 02:06:41 -0500 (CDT) Received: from optimator.noacks.org ([127.0.0.1]) by localhost (optimator.noacks.org [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 10207-11; Fri, 1 Jul 2005 02:06:40 -0500 (CDT) Received: from compgeek.noacks.org (compgeek [192.168.1.10]) by optimator.noacks.org (Postfix) with ESMTP id 57AA260CE; Fri, 1 Jul 2005 02:06:40 -0500 (CDT) Received: from [127.0.0.1] (localhost [127.0.0.1]) by compgeek.noacks.org (8.13.4/8.13.4) with ESMTP id j6176dPI004447; Fri, 1 Jul 2005 02:06:39 -0500 (CDT) (envelope-from noackjr@alumni.rice.edu) Message-ID: <42C4EB7A.7000806@alumni.rice.edu> Date: Fri, 01 Jul 2005 02:06:34 -0500 From: Jonathan Noack User-Agent: Mozilla Thunderbird 1.0.2 (X11/20050428) X-Accept-Language: en-us, en MIME-Version: 1.0 To: lars References: <42C45A55.4020303@gmx.at> In-Reply-To: <42C45A55.4020303@gmx.at> X-Enigmail-Version: 0.91.0.0 OpenPGP: id=991D8195; url=http://www.noacks.org/cert/noackjr.asc Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig9252AF216CC493C6ED6656C0" X-Virus-Scanned: amavisd-new at noacks.org Cc: freebsd-stable@freebsd.org Subject: Re: How is the patchlevel set? X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: noackjr@alumni.rice.edu List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Jul 2005 07:06:46 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig9252AF216CC493C6ED6656C0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit On 06/30/05 15:47, lars wrote: > I can't seem to find out how the patchlevel is set. > > Is it incremented with each SA's patch, kernel or world, > or only kernel or only world? > > Could anyone point me to some documentation by the FreeBSD project? > > I know this is the stable list, but I don't want to subscribe to > one more list just for this question. The patch level is set in src/sys/conf/newvers.sh. I believe this means that it is only updated after rebuilding the kernel (see 'sysctl kern.version'). I have often applied patches from Security Advisories and rebuilt only what was necessary instead of world/kernel. With a userland vulnerability, this is often the most expedient and unintrusive method. However, the new patch level is not set this way so you have to document the update for yourself. On client machines I sometimes do the full world/kernel rebuild and schedule a reboot just to avoid questions about whether the machine is up-to-date. -- Jonathan Noack | noackjr@alumni.rice.edu | OpenPGP: 0x991D8195 --------------enig9252AF216CC493C6ED6656C0 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (FreeBSD) iD8DBQFCxOt/UFz01pkdgZURAo4gAJ0eHIdGBKN7WGV7/nNJSvxNPbRYeACdGuQW DvB+FE3q95iBZrIVJpZXQhE= =AoqL -----END PGP SIGNATURE----- --------------enig9252AF216CC493C6ED6656C0--