From owner-freebsd-users-jp@freebsd.org Tue Nov 5 03:19:49 2019 Return-Path: Delivered-To: freebsd-users-jp@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id C9E151BB386 for ; Tue, 5 Nov 2019 03:19:49 +0000 (UTC) (envelope-from paseri@fmp.to) Received: from www3342.sakura.ne.jp (www3342.sakura.ne.jp [49.212.235.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 476ZfC5Sj2z3FQT for ; Tue, 5 Nov 2019 03:19:46 +0000 (UTC) (envelope-from paseri@fmp.to) Received: from fsav105.sakura.ne.jp (fsav105.sakura.ne.jp [27.133.134.232]) by www3342.sakura.ne.jp (8.15.2/8.15.2) with ESMTP id xA53Jbq4071411 for ; Tue, 5 Nov 2019 12:19:37 +0900 (JST) (envelope-from paseri@fmp.to) Received: from www3342.sakura.ne.jp (49.212.235.52) by fsav105.sakura.ne.jp (F-Secure/fsigk_smtp/550/fsav105.sakura.ne.jp); Tue, 05 Nov 2019 12:19:37 +0900 (JST) X-Virus-Status: clean(F-Secure/fsigk_smtp/550/fsav105.sakura.ne.jp) Received: from [IPv6:2001:470:824b:a011:1cbf:5b7:a4a4:32cf] ([IPv6:2001:470:824b:a011:1cbf:5b7:a4a4:32cf]) (authenticated bits=0) by www3342.sakura.ne.jp (8.15.2/8.15.2) with ESMTPSA id xA53JYXY071388 (version=TLSv1.2 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Tue, 5 Nov 2019 12:19:37 +0900 (JST) (envelope-from paseri@fmp.to) To: freebsd-users-jp@freebsd.org References: From: Paseri Message-ID: <388249c2-c659-c6f9-d6b0-2b5f978e4f24@fmp.to> Date: Tue, 5 Nov 2019 12:19:34 +0900 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.2.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=UTF-8 Content-Language: en-US Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 476ZfC5Sj2z3FQT X-Spamd-Bar: +++++ Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of paseri@fmp.to designates 49.212.235.52 as permitted sender) smtp.mailfrom=paseri@fmp.to X-Spamd-Result: default: False [5.51 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(0.00)[+ip4:49.212.235.52]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-users-jp@freebsd.org]; TO_DN_NONE(0.00)[]; NEURAL_SPAM_MEDIUM(1.00)[1.000,0]; RCPT_COUNT_ONE(0.00)[1]; BAD_REP_POLICIES(0.10)[]; RCVD_COUNT_THREE(0.00)[4]; RCVD_TLS_LAST(0.00)[]; RBL_VIRUSFREE_BOTNET(2.00)[52.235.212.49.bip.virusfree.cz : 127.0.0.2]; NEURAL_SPAM_LONG(1.00)[1.000,0]; DMARC_NA(0.00)[fmp.to]; IP_SCORE(1.51)[ipnet: 49.212.0.0/16(4.05), asn: 9371(3.51), country: JP(0.00)]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:9371, ipnet:49.212.0.0/16, country:JP]; MID_RHS_MATCH_FROM(0.00)[] Subject: [FreeBSD-users-jp 96465] Re: =?utf-8?b?cG9ydHMg5pu05paw44Gu5omL6aCG?= X-BeenThere: freebsd-users-jp@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion relevant to FreeBSD communities in Japan List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Nov 2019 03:19:49 -0000 たけふ＠大阪豊中です セキュリティの脆弱な箇所が判明しているデーモンを起動させた状態で、 バイナリの構築及び更新は個人的に危険すぎると言いたいトコですが、 それは各々の管理者の考え方次第であり、 adhoc 的な回避方法があって、 その回避方法を実施しよって上でという限定した範囲じゃったら、 提示された手法でもアップデートを完了させるという事であれば可能ですね。 如何に手抜きして🙄バイナリの更新するのかが、 会社組織上で動かしてるのと違うトコじゃけ、 個人的には、それでも良いとは思ってます(笑) あくまでも、セキュリティ的には良くない方法という事を、 念頭に置いて作業なされてくださいと、 一言老婆心から付け加えときます✌