From owner-freebsd-security@FreeBSD.ORG Thu Sep 18 13:48:36 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 96C4216A4BF for ; Thu, 18 Sep 2003 13:48:36 -0700 (PDT) Received: from mail.praemunio.com (mail.praemunio.com [66.179.47.216]) by mx1.FreeBSD.org (Postfix) with SMTP id A70A243FCB for ; Thu, 18 Sep 2003 13:48:35 -0700 (PDT) (envelope-from frank@knobbe.us) Received: from pcp563961pcs.rthfrd01.tn.comcast.net (HELO mail.knobbe.us) (68.53.41.27) by mail.praemunio.com with SMTP; 18 Sep 2003 15:48:34 -0500 Received: from localhost (HELO frankslaptop) by localhost with SMTP; 18 Sep 2003 15:48:32 -0500 Received: from localhost (HELO ??) by localhost with SMTP; 18 Sep 2003 15:48:23 -0500 From: Frank Knobbe To: John Kozubik In-Reply-To: <20030918122317.C82609-100000@kozubik.com> References: <20030918122317.C82609-100000@kozubik.com> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-+yJsKphIoFAfSF4Zwo+K" Message-Id: <1063918102.463.24.camel@localhost> Mime-Version: 1.0 X-Mailer: Ximian Evolution 1.4.4 Date: Thu, 18 Sep 2003 15:48:23 -0500 cc: freebsd-security@freebsd.org Subject: Re: Patching jails X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Sep 2003 20:48:36 -0000 --=-+yJsKphIoFAfSF4Zwo+K Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Thu, 2003-09-18 at 14:28, John Kozubik wrote: > No special procedure is necessary. Log into the jail, su to root, and > follow the instructions in the SA - they will work just fine. >=20 > You may or may not have a populated /usr/src/secure though - you can get > it with cvsup, however it is faster and easier to simply tar up the > /usr/src/secure on the base system and untar it in the jail. I presume > this to be safe, as there should never be a version mismatch between the > base system and the jails running on it. I would imagine that a /usr/src/secure;make install DESTDIR=3D/usr/jail would work just as well. Or is using DESTDIR not recommended for updating binaries? Regards, Frank --=-+yJsKphIoFAfSF4Zwo+K Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (FreeBSD) iD8DBQA/ahoWpo+MRgtrF98RAu57AKC+2nCzHvXlyUky8Pep/YeksMoh8gCg8bak fexgKtywYVpQxkuonKDuH0Y= =otwc -----END PGP SIGNATURE----- --=-+yJsKphIoFAfSF4Zwo+K--