From owner-freebsd-security Fri Apr 20 12:41:12 2001 Delivered-To: freebsd-security@freebsd.org Received: from obsecurity.dyndns.org (adsl-63-207-60-27.dsl.lsan03.pacbell.net [63.207.60.27]) by hub.freebsd.org (Postfix) with ESMTP id 9E74A37B43C for ; Fri, 20 Apr 2001 12:41:06 -0700 (PDT) (envelope-from kris@obsecurity.org) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id A72FC66B1C; Fri, 20 Apr 2001 12:41:04 -0700 (PDT) Date: Fri, 20 Apr 2001 12:41:04 -0700 From: Kris Kennaway To: Brian Tiemann Cc: Kris Kennaway , Rob Simmons , Ben Vaughn , Chris Faulhaber , security@FreeBSD.ORG Subject: Re: Another glob problem Message-ID: <20010420124104.A75540@xor.obsecurity.org> References: <20010419164947.M72854-100000@mail.wlcg.com> <3ADF7BDD.A7868DA@packeteer.com> <20010419180118.C54774@xor.obsecurity.org> <3ADF8C73.7E987982@packeteer.com> <20010419181459.B57373@xor.obsecurity.org> <3ADF8EFB.1B6EBA04@packeteer.com> <20010419183125.A57696@xor.obsecurity.org> <3ADF92DC.2B5A941D@packeteer.com> <20010419194710.A58378@xor.obsecurity.org> <3AE0780F.BAF16352@packeteer.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="Qxx1br4bt0+wmkIi" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <3AE0780F.BAF16352@packeteer.com>; from briant@packeteer.com on Fri, Apr 20, 2001 at 10:55:27AM -0700 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org --Qxx1br4bt0+wmkIi Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Fri, Apr 20, 2001 at 10:55:27AM -0700, Brian Tiemann wrote: > Okay-- I've solved this problem (for the edification of the rest who > are in my boat) by cvsupping back to RELENG_4_2_0_RELEASE, applying the > glob patch, rebuilding and reinstalling /usr/src/lib/libc and > /usr/src/libexec/ftpd, and then cvsupping back to RELENG_4. You now have a libc which was built from different sources from the rest of your userland. It may all work, but there's no guarantee; for example if a userland utility depends on a libc interface which was only added after 4.2-R, it will now fail. This is why I suggested that a buildworld is the only safe way of rebuilding, if you're tracking -STABLE. > Just a curiosity point, though... would I have been able to do a make > buildworld, then make install only /usr/src/lib/libc? Just trying to see > if that would have been a viable alternative that I could recommend to > others... No, because your entire libc has changed (not just the glob() function), and other things may depend on it. You can only get away with doing partial installs if the relevant changes to the file are small, and you manually take into account all possible dependencies. Kris --Qxx1br4bt0+wmkIi Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE64JDQWry0BWjoQKURAn30AJ4i36TlgGqhyCdnckdzr45+wegjtQCfZWBY gXwP9w86bR+2gxZ4xftwlPk= =mzd2 -----END PGP SIGNATURE----- --Qxx1br4bt0+wmkIi-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message