From owner-freebsd-security@FreeBSD.ORG Tue Apr 30 21:15:37 2013 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id A07A31E0; Tue, 30 Apr 2013 21:15:37 +0000 (UTC) (envelope-from gjb@FreeBSD.org) Received: from onyx.glenbarber.us (onyx.glenbarber.us [199.48.134.227]) by mx1.freebsd.org (Postfix) with ESMTP id 5017E1883; Tue, 30 Apr 2013 21:15:37 +0000 (UTC) Received: from glenbarber.us (75-146-225-65-Philadelphia.hfc.comcastbusiness.net [75.146.225.65]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) (Authenticated sender: gjb) by onyx.glenbarber.us (Postfix) with ESMTPSA id F035723F804; Tue, 30 Apr 2013 17:15:33 -0400 (EDT) DKIM-Filter: OpenDKIM Filter v2.8.2 onyx.glenbarber.us F035723F804 Authentication-Results: onyx.glenbarber.us; dkim=none reason="no signature"; dkim-adsp=none Date: Tue, 30 Apr 2013 17:15:31 -0400 From: Glen Barber To: Brett Glass Subject: Re: FreeBSD Security Advisory FreeBSD-SA-13:05.nfsserver Message-ID: <20130430211531.GA1621@glenbarber.us> References: <201304292055.r3TKtcEs039958@freefall.freebsd.org> <201304292208.QAA16119@lariat.net> <20130430034603.GF1588@glenbarber.us> <201304300416.WAA20729@lariat.net> <20130430042415.GG1588@glenbarber.us> <201304301936.NAA02519@lariat.net> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="XsQoSWH+UP9D9v3l" Content-Disposition: inline In-Reply-To: <201304301936.NAA02519@lariat.net> X-Operating-System: FreeBSD 10.0-CURRENT amd64 User-Agent: Mutt/1.5.21 (2010-09-15) Cc: freebsd-security@freebsd.org, Colin Percival , Chris Rees X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Apr 2013 21:15:37 -0000 --XsQoSWH+UP9D9v3l Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Apr 30, 2013 at 01:36:52PM -0600, Brett Glass wrote: > This is one of several reasons why one would expect freebsd-update(8) to = be > considerate of a custom kernel: it is documented as knowing about > /boot/GENERIC as the place to put he GENERIC kernel if one builds a > custom one. >=20 Let's start from the beginning. What is the name of your custom kernel? Glen > Also, I don't think that freebsd-update(8) should, in the course of a nor= mal > update, create a situation where the system is not be able to reboot. This > would have been the case with the system I updated, had I not caught > the problem. >=20 > I daresay that a system that stops working after a routine update is > a violation > of POLA. ;-) >=20 > In my case, the GENERIC kernel was installed in place of the custom > one, without > modules the system needed -- in either loadable or built-in form. It's ea= sy to > prevent this by modifying /boot/GENERIC (which freebsd-update is > supposed to know > about) instead of overwriting the custom kernel... and then advising the > administrator that a new build might be needed. >=20 > --Brett Glass >=20 > At 10:26 AM 4/30/2013, Chris Rees wrote: >=20 > >I agreed with Glen, but when checking the docs it turns out that they say > >that freebsd-update will detect a kernel in /boot/GENERIC: > > > >http://www.freebsd.org/doc/handbook/updating-upgrading-freebsdupdate.html > > > >Are the docs wrong, or is this only in new freebsd-update? > > > >Chris > >_______________________________________________ > >freebsd-security@freebsd.org mailing list > >http://lists.freebsd.org/mailman/listinfo/freebsd-security > >To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.o= rg" --XsQoSWH+UP9D9v3l Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (FreeBSD) iQEcBAEBCAAGBQJRgDRzAAoJEFJPDDeguUajkAIH/09p5KEJeERfmK9b05Im/aep wbFVSXJR2r0IYzYy8tXvJsgzfil9Y18FfH8MHdp58imHS+8ExngJo2qMaWATJJBb r8ywdFcc7tP4dKuCzjWGCjw/e54pSaVN7SANYFZhLslYaI4gHO/E9qr5AxZ7eIzC NwpUeIf/tnC4e3vfkN/whMxA1aFJ2OZcSMoAq+uQYgAlAXQCn93o00II1oMFM2rg ria0T2PAZb0szF0AsNLprtEoslOEl6IoBPNQ/LLrzRtPdzwn4AkHLZN8/8kWnkYv d4QNnWz4WQSgK8Ptq9+moY09+1t2jRjer/qyz9jG5aa8QNKeyHamZ3X+av6RHAg= =wIWS -----END PGP SIGNATURE----- --XsQoSWH+UP9D9v3l--