RE: [cobalt-security] Kernel Update

[Richard Badua <rbadua@xxxxxxxxx>]

Do I have to install the original kernel update and then the update. Or can
I just install this new one directly?  I Didn't install theprevious kernel
update because of the postings that stated it didn't fix the ptrace and
sysctl problems.  Please advise

Richard

-----Original Message-----
From: cobalt-security-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-security-admin@xxxxxxxxxxxxxxx]On Behalf Of Rene Hendrix
Sent: Tuesday, June 26, 2001 8:14 AM
To: cobalt-security@xxxxxxxxxxxxxxx
Cc: baltimoremd@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-security] Kernel Update


According to baltimoremd@xxxxxxxxxxxxxxx, 
> Cobalt just announced a kernel update:
> 
> CacheRaQ4-All-Kernel-0.0.1-2.216C27III: Kernel Update 0.0.1
> Requires Reboot: YES
> This Kernel Upgrade provides a complete fix for the sysctl negative offset
> bug as well as the ptrace setuid bug. Information regarding this update
> can
> be found at Security Focus' website.  The URLs are:
> be found at Security Focus' website.  The URLs are:
> http://www.securityfocus.com/vdb/?id=2364 - sysctl bug
> http://www.securityfocus.com/vdb/?id=2044 - ptrace bug
> NOTE:
> - The previous version of this update did not completely close the
> security
> holes mentioned above. It is strongly recommended that users install the
> latest Kernel version.
> - A known issue with systems not being able to reboot completely has been
> fixed in this version. Once installation is completed the system should be
> powered down and back up so the new kernel can take effect.
> ^^^^^^^^^^^^^^^^^^^^^^^^
> 
> But, the web download page doesn't mention the power-down/power-up
> 
> Considering that my RaQ is more than a comfortable walk from here, I'm
> wondering if anyone has installed the patch....and whether they
> did the pwer-don/power-up routine.

The need for a power-down/power-up is a CacheRaq specific situation. On
all other RaQ's a simple reboot would work fine; however, if you try to
reboot your CacheRaq without this kernel update & the power-down/power-up
state, it will simply hang.

-r

-- 
Rene Hendrix
Sun Cobalt Server Appliances
rhendrix@xxxxxxx
_______________________________________________
cobalt-security mailing list
cobalt-security@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-security