From owner-freebsd-questions@freebsd.org Thu Mar 10 15:18:00 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E8D2DACB6D8 for ; Thu, 10 Mar 2016 15:17:59 +0000 (UTC) (envelope-from kraduk@gmail.com) Received: from mail-wm0-x22b.google.com (mail-wm0-x22b.google.com [IPv6:2a00:1450:400c:c09::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 92C0714B4 for ; Thu, 10 Mar 2016 15:17:59 +0000 (UTC) (envelope-from kraduk@gmail.com) Received: by mail-wm0-x22b.google.com with SMTP id p65so33100399wmp.0 for ; Thu, 10 Mar 2016 07:17:59 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=i3VJnNsqir26EUOwptA/17SZyxv1LbgqmYrpZKaCdWs=; b=j6cOja0WIYJN2po5lzSXIfRLDERc8R4Mk7xdg1cH+DKmv6Kj6TquP5IIgMyzAZcYZp 6rqsjr2DdYjtzQzZVvH2uMzt7b8E/+ZOExHUFU27yHk9lNKvoxV+WjzFUhEED8YljVTJ IfvH4EZHKR4jI+LaHs0aHdEM66GzM2lyfC0xyKNaiBU9EhQp4TzeM/+qh6NQ6KhdVE5Z sP+4Xjf7hVIJ69Nz+ihj5GhOqKZwpzXI6geI9ixX4kmFLQUO72NFtSc8cy8S3NUSk7K1 DQNT+you3rP42DQVBlwQWB9k4d/L7sCb6lgPh+ccKWT37MrWKzvB12O5pTUMsH7gag04 aYlQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=i3VJnNsqir26EUOwptA/17SZyxv1LbgqmYrpZKaCdWs=; b=O9IcB9Ck1a8I+KEwGhwwTOfjuj+HTuypDaui7Yl50BQ7TaWtgiI/+2Al23P6jDIACB VrPdCg0jz9kO8pecLrB9HDMMKydGj5XsP4fsiInnk7yFneem6NKclqrxXrsOdf83HMXc HPWE586bpsi+jJui23pbhdjAxHTETj7QKRn3ZJQ+ULVyN4LC743OenuBf3qe2S8GhAZb +q83rxGVeAd/9oQTJGpZTlKP0V84Wc4x9TLyX4cBiRnbSxpvLEwCXxNyoEkhuNSPxxi7 S6lHWUU92P0gqmDy4tGVPGct1fdV69I+qVaybmnjUuAld3RfT9pq+yiLrevAYBkKZROA W2yA== X-Gm-Message-State: AD7BkJKRPlMKo7gXpIByBYFuSyEfLmGztNRrfFf/rniyA8Hjb8jQMBsNaEhDqeurEZ7QkU2PMvy/OK5Il7p/sA== MIME-Version: 1.0 X-Received: by 10.194.83.42 with SMTP id n10mr4586011wjy.20.1457623077996; Thu, 10 Mar 2016 07:17:57 -0800 (PST) Received: by 10.28.31.143 with HTTP; Thu, 10 Mar 2016 07:17:57 -0800 (PST) In-Reply-To: <20160310143834.GA16507@neutralgood.org> References: <56E162B5.4010309@qeng-ho.org> <20160310143834.GA16507@neutralgood.org> Date: Thu, 10 Mar 2016 15:17:57 +0000 Message-ID: Subject: Re: Are system updates without reboots possible? From: krad To: "Kevin P. Neal" Cc: Arthur Chance , FreeBSD-Questions Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.21 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Mar 2016 15:18:00 -0000 >From what i remember there is an equivalent of linux pivot mount coming in freebsd 11. Doing that technically isn't a reboot, but it will definitely ensure everything is restarted. Is there any motive to this though, as the safest way is to create a new boot env with the new patched stuff in, and then reboot. You have fail back then, incase of issues. On 10 March 2016 at 14:38, Kevin P. Neal wrote: > On Thu, Mar 10, 2016 at 12:04:05PM +0000, Arthur Chance wrote: > > The latest security advisory on openssl contains the usual mantra > > > > "Restart all deamons using the library, or reboot the system." > > > > I usually just reboot but find myself wondering if there's a reliable > > *automatic* way of identifying which running programs use any given > > library (or set of libraries), and identify whether or not they're > > daemons controlled by service(8). > > > > I suppose root could use ps and ldd to identify affected programs, but > > this seems like brute force and I can't see how to tie into the > > service(8) structure. > > > > Anybody got ideas on this? It could be useful for updating servers you'd > > rather not reboot. > > You can use lsof to see which processes have a library open. If they're > using the library then they'll have it open. > > This does nothing to help connect back to service(8), however. > -- > Kevin P. Neal http://www.pobox.com/~kpn/ > > "Nonbelievers found it difficult to defend their position in \ > the presense of a working computer." -- a DEC Jensen paper > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to " > freebsd-questions-unsubscribe@freebsd.org" >