Date: Thu, 25 Feb 2021 10:46:43 -0800 From: Kevin Oberman <rkoberman@gmail.com> To: Ed Maste <emaste@freebsd.org> Cc: FreeBSD-STABLE Mailing List <freebsd-stable@freebsd.org> Subject: Re: How do I know if my 13-stable has security patches? Message-ID: <CAN6yY1vyBwwcqsbTXnMjW4tYe6j4uUTK3cNDm_D2L72iDFOrcQ@mail.gmail.com> In-Reply-To: <CAPyFy2CcTfF3nOVnZHSba_f2gvbzZERgr6C0bCx3oY0RwRogSw@mail.gmail.com> References: <CAN6yY1tTt%2BEn6hzMYrjm2fRkUPBAuN9t8%2BR27Z3To_sJRbfUVA@mail.gmail.com> <CAPyFy2Dg9dP5%2BCWvmUhf58b4KotqrtWRt%2BnrZjoiNnzY5mk-eg@mail.gmail.com> <CAN6yY1tQCSxDt_HKdgA81sBN1AWBb_J-GuJYvKZRK0QtNMhWQA@mail.gmail.com> <CAPyFy2CcTfF3nOVnZHSba_f2gvbzZERgr6C0bCx3oY0RwRogSw@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Feb 25, 2021 at 6:10 AM Ed Maste <emaste@freebsd.org> wrote:
> On Thu, 25 Feb 2021 at 02:42, Kevin Oberman <rkoberman@gmail.com> wrote:
> >
> > Thanks, Ed, but where do I find this? uname -a" gives me
> stable/13-007101f87. For a while I was seeing a hyphenated number prefixed
> with a 'c' and I had assumed that that number was the sequence.
>
> It is (was) - we changed from 'c' to avoid having it look like a hex value.
>
> To generate (this part of) uname the build script runs:
> if [ "$($git_cmd rev-parse --is-shallow-repository)" = false ] ;
> then
> git_cnt=$($git_cmd rev-list --first-parent --count
> HEAD 2>/dev/null)
> if [ -n "$git_cnt" ] ; then
> git="n${git_cnt}-${git}"
> fi
> fi
>
> Would you try running, at the top of your stable/13 src tree:
> git rev-parse --is-shallow-repository
> git rev-list --first-parent --count HEAD
>
I do run a shallow clone, as I suspect most non-developers will.
# git rev-parse --is-shallow-repository
true
# git rev-list --first-parent --count HEAD
133
As for an easy check for the presence of a patch by hash, I like the "git
log --pretty=oneline" | grep <hash>
This assumes that the sources have NOT been updated since the system was
updated. If they have, you can do a "egrep -n ^<hash>" on both the partial
hash in "uname -a" and in the security announcement and see which is older
by line number.
My thanks to Jeremy Chadwick for this approach.
--
Kevin Oberman, Part time kid herder and retired Network Engineer
E-mail: rkoberman@gmail.com
PGP Fingerprint: D03FB98AFA78E3B78C1694B318AB39EF1B055683
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAN6yY1vyBwwcqsbTXnMjW4tYe6j4uUTK3cNDm_D2L72iDFOrcQ>