full-disclosure - Security Updates Without Rebooting

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <1131404612.4531.2.camel@core1.inhouse.serverpeak.com>
Date: Tue Nov  8 01:38:39 2005
From: stuart at serverpeak.com (Stuart Low)
Subject: Security Updates Without Rebooting

Hey,

> Can someone explain how to apply security patches on the system without 
> rebooting the machine?
> I guess that I cant patch the kernel without compiling and rebooting the 
> machine, so the only way is with iptables and keeping the daemons "fresh"?

Well, if you have a customised kernel you'll probably find that your
need to reboot with a new kernel becomes fairly low (Kernel level
exploits are fairly rare, especially remote ones).

If you've upgraded services probably the easiest way to ensure they're
loaded with the latest version would be to drop the system to single
user mode then bring it back up to multiuser mode (ala, init 2, init 3).

Stuart