From owner-freebsd-questions Mon May 21 6:57:25 2001 Delivered-To: freebsd-questions@freebsd.org Received: from cartman.techsupport.co.uk (cabletel1.cableol.net [194.168.3.4]) by hub.freebsd.org (Postfix) with ESMTP id E058637B43E for ; Mon, 21 May 2001 06:57:18 -0700 (PDT) (envelope-from ceri@techsupport.co.uk) Received: from ceri by cartman.techsupport.co.uk with local (Exim 3.22 #2) id 151qDb-0003XN-00; Mon, 21 May 2001 14:59:31 +0100 Date: Mon, 21 May 2001 14:59:31 +0100 From: Ceri To: Adyas@twowaytv.com Cc: freebsd-questions@FreeBSD.ORG Subject: Re: uptime limits Message-ID: <20010521145931.A11873@cartman.techsupport.co.uk> References: <911D8F660DF6D411B61F00500462BA01775914@exchange.twowaytv.co.uk> <20010521160524.I60364@everest.wananchi.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010521160524.I60364@everest.wananchi.com>; from wash@wananchi.com on Mon, May 21, 2001 at 04:05:24PM +0300 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Mon, May 21, 2001 at 04:05:24PM +0300, Odhiambo Washington said: > * Alex Dyas [20010521 15:36]: writing on the subject 'RE: uptime limits' > > If you have an uptime of 497 days then you basically have a system riddled > with security holes. > > This assumes that a reboot is necessary to apply a security patch. Is this > necessarily the case? For instance, an upgrade of Bind to patch a hole > wouldn't mean powering the system down would it? No, but fixing anyone of the 10 exploits in the kernel category since Jan 10th 2000 (497 days ago) would. Yes, I have a list ;^) Admittedly, I wasn't aware that there was a marketing spin to all this. I can imagine the marketing department's spin on that already : ``Yeah well Apache's been fux0red for months and we can't get that sendmail thing working properly but at least we didn't reboot yet.'' However, at the end of the day it's just an opinion. Ceri -- I probably wouldn't like you. Really. I really probably wouldn't like you. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message