From owner-freebsd-questions@FreeBSD.ORG Sun May 27 14:20:12 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 6998016A468 for ; Sun, 27 May 2007 14:20:12 +0000 (UTC) (envelope-from artifact.one@googlemail.com) Received: from wx-out-0506.google.com (wx-out-0506.google.com [66.249.82.238]) by mx1.freebsd.org (Postfix) with ESMTP id 2106A13C489 for ; Sun, 27 May 2007 14:20:11 +0000 (UTC) (envelope-from artifact.one@googlemail.com) Received: by wx-out-0506.google.com with SMTP id h28so865761wxd for ; Sun, 27 May 2007 07:20:11 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=googlemail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=k6g+1yfKPOLnsl8Z/g1yvqceL1jpYRgCvm7Nz35Z+HdjRN4X4rPK1Ff4zlOjO55RS6phHu19JwIvpJwN+ljSPT+DhGdKeaVKJk/MsmT+l5epR9Rt433zflCERvP1Rx9Fwdj7KHYk1KQmLFTS2UvhiQNkIhOZv6dvCXkZMv4pAvA= DomainKey-Signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=DDiA1/Yp+XVMNasfAw1Sz7zJty4jU8jpGR46vl7wpaWmpu0slstE+9PxXyvSWaydO9pbfGXdaI7rnydsC4gkh6F1nzHnRbmBwNyDEPBsH0bvIMZmAnyaJQvcnZhc9nH55f4cb9Pcx0bPU9BOOuy7lTukzZnaBfE1elPKjV1BX9Y= Received: by 10.90.101.19 with SMTP id y19mr3436625agb.1180275611372; Sun, 27 May 2007 07:20:11 -0700 (PDT) Received: by 10.90.102.14 with HTTP; Sun, 27 May 2007 07:20:11 -0700 (PDT) Message-ID: <8e96a0b90705270720p7576162bxe63146bd88a90bf5@mail.gmail.com> Date: Sun, 27 May 2007 15:20:11 +0100 From: "mal content" To: "Dimitar Vasilev" In-Reply-To: <59adc1a0705270710t30025b6dj70a3abaf770e02bc@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <8e96a0b90705260642m7213220ch852786273a7de2c@mail.gmail.com> <59adc1a0705270710t30025b6dj70a3abaf770e02bc@mail.gmail.com> Cc: freebsd-questions@freebsd.org Subject: Re: Distributing kernel to identical machine (with MAC, AUDIT) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 May 2007 14:20:12 -0000 On 27/05/07, Dimitar Vasilev wrote: > Yup on 4 conditions: > 1. you have serial console access to all machines. > 2. you've tested that kernel works. > 3. backed up the previous kernel > 4. have not raised securelevel to 1 and have added the proper rc.conf > values and got the appropriate MAC labels handy. Yes, all four conditions are fulfilled. These identical machines are test boxes anyway. Doesn't matter if I end up locked out of them. thanks, MC