Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 10 Mar 2016 13:13:11 +0000
From:      Steve O'Hara-Smith <steve@sohara.org>
To:        freebsd-questions@freebsd.org
Subject:   Re: Are system updates without reboots possible?
Message-ID:  <20160310131311.95dcd6c66c6dbf60339a2df0@sohara.org>
In-Reply-To: <56E162B5.4010309@qeng-ho.org>
References:  <56E162B5.4010309@qeng-ho.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 10 Mar 2016 12:04:05 +0000
Arthur Chance <freebsd@qeng-ho.org> wrote:

> The latest security advisory on openssl contains the usual mantra
> 
> "Restart all deamons using the library, or reboot the system."
> 
> I usually just reboot but find myself wondering if there's a reliable 
> *automatic* way of identifying which running programs use any given 
> library (or set of libraries), and identify whether or not they're 
> daemons controlled by service(8).
> 
> I suppose root could use ps and ldd to identify affected programs, but 
> this seems like brute force and I can't see how to tie into the 
> service(8) structure.
> 
> Anybody got ideas on this? It could be useful for updating servers you'd 
> rather not reboot.

	You could just apply brute force and use service -R to restart all
services or reboot if the update included a new kernel. Overkill but safe.

-- 
Steve O'Hara-Smith <steve@sohara.org>




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20160310131311.95dcd6c66c6dbf60339a2df0>