Re: [Full-disclosure] Security Updates Without Rebooting

2005-11-14 Thread Marco Ermini
On 11/8/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: [...] > Note that rpm will only do that if the person who packaged the updated RPM > specified a 'postinstall' scriptlet requesting it. So RPM *can* restart a > daemon, but it's a function of the package, not of rpm. [...] Sorry for the lat

Re: [Full-disclosure] Security Updates Without Rebooting

2005-11-09 Thread Joachim Schipper
On Mon, Nov 07, 2005 at 10:42:11PM +, Carlos Silva aka|Danger_Man| wrote: > Hello all, > > Can someone explain how to apply security patches on the system without > rebooting the machine? > > I guess that I cant patch the kernel without compiling and rebooting the > machine, so the only way

Re: [Full-disclosure] Security Updates Without Rebooting

2005-11-08 Thread Valdis . Kletnieks
On Wed, 09 Nov 2005 01:48:33 +0100, Joxean Koret said: > In some cases you can hot-patch a kernel without rebooting the system, > loading a module (lkm) with the patch inside. Note that this is serious double-or-nothing here, because it's just *so* easy to totally screw the pooch doing this, and

Re: [Full-disclosure] Security Updates Without Rebooting

2005-11-08 Thread Joxean Koret
In some cases you can hot-patch a kernel without rebooting the system, loading a module (lkm) with the patch inside.On 11/7/05, Carlos Silva aka |Danger_Man| <[EMAIL PROTECTED]> wrote: Hello all,Can someone explain how to apply security patches on the system withoutrebooting the machine?I guess th

Re: [Full-disclosure] Security Updates Without Rebooting

2005-11-07 Thread Valdis . Kletnieks
On Mon, 07 Nov 2005 18:05:11 PST, Alexander Sotirov said: > On Linux you can just restart the patched service of course. Most package > managers (i.e. dpkg and rpm) will do it for you after the update. Note that rpm will only do that if the person who packaged the updated RPM specified a 'postins

Re: [Full-disclosure] Security Updates Without Rebooting

2005-11-07 Thread Alexander Sotirov
Carlos Silva aka |Danger_Man| wrote: > Can someone explain how to apply security patches on the system without > rebooting the machine? If you are interested in Windows patches (I apologise for the market-speak): http://www.determina.com/solutions/liveshield.html On Linux you can just restart the

Re: [Full-disclosure] Security Updates Without Rebooting

2005-11-07 Thread Valdis . Kletnieks
On Tue, 08 Nov 2005 09:03:32 +1000, Stuart Low said: > Well, if you have a customised kernel you'll probably find that your > need to reboot with a new kernel becomes fairly low (Kernel level > exploits are fairly rare, especially remote ones). > > If you've upgraded services probably the easiest

Re: [Full-disclosure] Security Updates Without Rebooting

2005-11-07 Thread Stuart Low
Hey, > Can someone explain how to apply security patches on the system without > rebooting the machine? > I guess that I cant patch the kernel without compiling and rebooting the > machine, so the only way is with iptables and keeping the daemons "fresh"? Well, if you have a customised kernel y

[Full-disclosure] Security Updates Without Rebooting

2005-11-07 Thread Carlos Silva aka |Danger_Man|
Hello all, Can someone explain how to apply security patches on the system without rebooting the machine? I guess that I cant patch the kernel without compiling and rebooting the machine, so the only way is with iptables and keeping the daemons "fresh"? Regards, Carlos Silva, http://osiri