From owner-freebsd-security@freebsd.org Wed Sep 30 19:26:57 2015 Return-Path: Delivered-To: freebsd-security@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E2312A0CD9A for ; Wed, 30 Sep 2015 19:26:56 +0000 (UTC) (envelope-from david@catwhisker.org) Received: from albert.catwhisker.org (mx.catwhisker.org [198.144.209.73]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id A01001C1E for ; Wed, 30 Sep 2015 19:26:55 +0000 (UTC) (envelope-from david@catwhisker.org) Received: from albert.catwhisker.org (localhost [127.0.0.1]) by albert.catwhisker.org (8.15.2/8.15.2) with ESMTP id t8UJQbKI045199; Wed, 30 Sep 2015 12:26:37 -0700 (PDT) (envelope-from david@albert.catwhisker.org) Received: (from david@localhost) by albert.catwhisker.org (8.15.2/8.15.2/Submit) id t8UJQbqW045198; Wed, 30 Sep 2015 12:26:37 -0700 (PDT) (envelope-from david) Date: Wed, 30 Sep 2015 12:26:36 -0700 From: David Wolfskill To: d@delphij.net Cc: Robert Blayzor , freebsd-security@freebsd.org Subject: Re: FreeBSD Security Advisory FreeBSD-SA-15:24.rpcbind Message-ID: <20150930192636.GX1125@albert.catwhisker.org> Mail-Followup-To: David Wolfskill , d@delphij.net, Robert Blayzor , freebsd-security@freebsd.org References: <20150929183942.569F311FD@freefall.freebsd.org> <560C33B7.70100@delphij.net> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="GSe1yqLCWMTKXEPF" Content-Disposition: inline In-Reply-To: <560C33B7.70100@delphij.net> User-Agent: Mutt/1.5.24 (2015-08-30) X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Sep 2015 19:26:57 -0000 --GSe1yqLCWMTKXEPF Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Sep 30, 2015 at 12:10:47PM -0700, Xin Li wrote: > Hi, >=20 > On 09/30/15 11:47, Robert Blayzor via freebsd-security wrote: > > Was this regression tested or missing more info? After updating and reb= ooting seeing a ton of problems with rpcbind core dumping at start.. lock m= anager fails to start, etc. >=20 > Yes, this was tested specifically with NFS scenario for some time and > was reviewed by several developers. > ... FWIW, after updating my build machine (which acts as both an NFS client, obtaining access to certain file systems from a ReadyNAS, and as an NFS server, providing access to its /usr/src and /usr/obj during updates of "production" machines), I noted no problems -- and I have tested both roles on the machine. It was updated from: FreeBSD freebeast.catwhisker.org 10.2-STABLE FreeBSD 10.2-STABLE #1813 r28= 8356M/288358:1002500: Tue Sep 29 04:15:28 PDT 2015 root@freebeast.catwh= isker.org:/common/S1/obj/usr/src/sys/GENERIC amd64 to: FreeBSD freebeast.catwhisker.org 10.2-STABLE FreeBSD 10.2-STABLE #1814 r28= 8411M/288418:1002500: Wed Sep 30 04:15:42 PDT 2015 root@freebeast.catwh= isker.org:/common/S1/obj/usr/src/sys/GENERIC amd64 And: freebeast(10.2-S)[13] service lockd status lockd is running as pid 582. freebeast(10.2-S)[14] ^lock^stat service statd status statd is running as pid 579. freebeast(10.2-S)[15]=20 (Yes, I recognize that I'm running stable/10, while the OP is running =2E.. releng/10, I think.) Peace, david --=20 David H. Wolfskill david@catwhisker.org Those who would murder in the name of God or prophet are blasphemous coward= s. See http://www.catwhisker.org/~david/publickey.gpg for my public key. --GSe1yqLCWMTKXEPF Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQJ8BAEBCgBmBQJWDDdsXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ4RThEMDY4QTIxMjc1MDZFRDIzODYzRTc4 QTY3RjlDOERFRjQxOTNCAAoJEIpn+cje9Bk7TQsP/i0ZmzlSR5hM8hApv9vwLDJ4 tNqM6coFSFgpOUhRgJrMkRuDN5P6aAGr6NexWwjdnO76QUg23lZ/+H790PHauOnW egduzHG+dQ/DXoMoOpO6iyUe8U54j+0RHBbmoxSss5LIMTDJdBRelvqUt7BmvxOs X6f8TwEtEx0WbSXCaDhylm1K6fDqc6fUmfpbjQp0YyMZmJlwp1YL83II2JlCThOF AH+XlZtvEW/7Y699MV1wOIAhu3GgQEcexdjbvGZIlLV6vmErIG5lWEFSPL2p823N XBbjFybkB21LBzu846XMn/muZRHHyagB/M5bjaZsuaFALrxQEoYMYOfAKocSzM4l 4tOGD0JkD1NX2I4outj6oQd8OW6Tv9HTWe4BR9NjOWy5WN5bCBP6eVn0R4YAgzN6 X8m35j0VfSq+xdmu/Ww4L0qZYytlwlCWyxq6JVTp5WkK4liuo0UsL7fxMIwhHatY Zydu7acatUGmUPCi/Ek9+mup3F8MKfPxaDL59sTRyv9rXRvofwoRd29iHH9jmA2C Zeq5Cvtg5nSrXqDLN4wny35Zs1zbbGcb1uAvEckXNfvGbHE1II3lcYFrmtF8ppc3 ldCyQ+gmf6jIyNjANpEvec0FyO2wEX/AlsDUfpu6JoLbuBQ0gQwGJZT31sqfNJc8 IQhOB34KVSA1RgYsvUXx =DSWD -----END PGP SIGNATURE----- --GSe1yqLCWMTKXEPF--