From owner-freebsd-questions@FreeBSD.ORG Wed Aug 8 19:25:05 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 63F8716A418 for ; Wed, 8 Aug 2007 19:25:05 +0000 (UTC) (envelope-from philip@Riderway.com) Received: from exhub015-1.exch015.msoutlookonline.net (exhub015-1.exch015.msoutlookonline.net [207.5.72.93]) by mx1.freebsd.org (Postfix) with ESMTP id 4CB6413C457 for ; Wed, 8 Aug 2007 19:25:05 +0000 (UTC) (envelope-from philip@Riderway.com) Received: from philip.office.rws (74.93.213.161) by smtpx15.msoutlookonline.net (207.5.72.103) with Microsoft SMTP Server (TLS) id 8.0.730.1; Wed, 8 Aug 2007 12:25:04 -0700 Message-ID: <46BA188E.5050606@riderway.com> Date: Wed, 8 Aug 2007 15:25:02 -0400 From: "Philip M. Gollucci" Organization: Rideray Inc. User-Agent: Thunderbird 2.0.0.4 (X11/20070703) MIME-Version: 1.0 To: Rakhesh Sasidharan References: <20070808222628.B49848@obelix.home.rakhesh.com> <0B124FFF-D212-4373-9D58-9F65A1E4E64A@mac.com> <20070808230920.R53363@obelix.home.rakhesh.com> In-Reply-To: <20070808230920.R53363@obelix.home.rakhesh.com> X-Enigmail-Version: 0.95.2 Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Cc: "freebsd-questions@freebsd.org" Subject: Re: No updates needed to update system to 6.2-RELEASE-p7? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Aug 2007 19:25:05 -0000 Rakhesh Sasidharan wrote: > > Chuck Swiger wrote: > >> Not all security patches involve updating the kernel. The recent ones have >> involved changes to BIND and the symlink attack starting up jails, and thus >> they do not result in the version printed by your kernel in dmesg or via >> uname changing. > > I see. Thanks. Didn't realize that only when the kernel gets updated does > the suffix change to -p7. I was under the impression that all updates > change the kernel string to -p7 just to show that there's been some > updates. That actually sounds like a bad thing IMHO. Because not -p4 is not -p4 -p4 = -p7 but for others it might =-p5 depending on the last time they updated. It might be nice to have freebsd-update update this portion of the kernel even if thats the only part thats updated. -- ------------------------------------------------------------------------ Philip M. Gollucci (philip@riderway.com) 323.219.4708 Senior System Admin - Riderway, Inc. http://riderway.com 1024D/EC88A0BF 0DE5 C55C 6BF3 B235 2DAB B89E 1324 9B4F EC88 A0BF Work like you don't need the money, love like you'll never get hurt, and dance like nobody's watching.