From owner-freebsd-security@FreeBSD.ORG Wed Jun 18 01:43:11 2014 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 06CF5DD4 for ; Wed, 18 Jun 2014 01:43:11 +0000 (UTC) Received: from pandora.au.calorieking.net (114.179.70.115.static.exetel.com.au [115.70.179.114]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id A06652533 for ; Wed, 18 Jun 2014 01:43:09 +0000 (UTC) Received: from pandora.internal (localhost [127.0.0.1]) by pandora.au.calorieking.net (Postfix) with ESMTP id C639C33CF2; Wed, 18 Jun 2014 09:43:00 +0800 (WST) X-Virus-Scanned: amavisd-new at calorieking.com Received: from pandora.au.calorieking.net ([127.0.0.1]) by pandora.internal (pandora.internal [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iFD8d4uCJE2y; Wed, 18 Jun 2014 09:42:50 +0800 (WST) Received: from egeria.internal (egeria.internal [192.168.2.111]) by pandora.au.calorieking.net (Postfix) with ESMTPSA id DD0F333CF5; Wed, 18 Jun 2014 09:42:50 +0800 (WST) Message-ID: <53A0EE9A.5000603@calorieking.com> Date: Wed, 18 Jun 2014 09:42:50 +0800 From: Gregory Orange User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: Morhold , freebsd-security@freebsd.org Subject: Re: freebsd-update.conf IgnorePaths linker.hints not working References: <5382A982.6090304@calorieking.com> <86vbssr665.fsf@nine.des.no> <538494E8.2060302@rsle.net> <5386957E.2070000@calorieking.com> <53A0C324.20200@morhold.ru> In-Reply-To: <53A0C324.20200@morhold.ru> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Jun 2014 01:43:11 -0000 On 18/06/14 06:37, Morhold wrote: > Same here with 9.1-RELEASE-p14: Since I've had no further instruction or advice here (or on -questions), I've solved it myself for now. > So I just did like this: > - copied /usr/sbin/freebsd-update to /usr/sbin/freebsd-update,my > - applied to /usr/sbin/freebsd-update,my the following patch: I'm doing something similar, the difference being I'm introducing a simple script rather than patching a file which might be changed in an update: $ sudo crontab -l 0 3 * * * /usr/local/scripts/freebsd-update-cron $ cat freebsd-update-cron #!/bin/sh mv /boot/kernel/linker.hints /boot/kernel/linker.hints.bk /usr/sbin/freebsd-update cron mv /boot/kernel/linker.hints.bk /boot/kernel/linker.hints