Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 11 Jan 2012 13:21:21 +0100
From:      Victor Balada Diaz <victor@bsdes.net>
To:        sasha <Z462vasa@mail.lviv.ua>
Cc:        freebsd-security@Freebsd.org
Subject:   Re: Hellp !!!
Message-ID:  <20120111122121.GD39290@equilibrium.bsdes.net>
In-Reply-To: <422F8D645D05433D9AC41EC89A0F7FE0@dom>
References:  <422F8D645D05433D9AC41EC89A0F7FE0@dom>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Jan 11, 2012 at 07:52:19AM +0200, sasha wrote:
> 197]: superpolka.com.ua (superpolka.com.ua[::ffff:77.87.154.174]) - error:
> FreeBSD with vulnerable chroot (FreeBSD-SA-11:07.chroot).
> 
> 197]: superpolka.com.ua (superpolka.com.ua[::ffff:77.87.154.174]) - chroot
> to '/home/ftp' failed for user 'ftp001': Operation not permitted.
> 
> 197]: superpolka.com.ua (superpolka.com.ua[::ffff:77.87.154.174]) - error:
> unable to set default root directory.
> 
>  
> 
>  
> 
> superpolka.com.ua 8.2-STABLE FreeBSD 8.2-STABLE #3: Sat Jan 7 10:03:34 EET
> 2012 root@superpolka.com.ua:/usr/src/sys/amd64/compile/NAS2 amd64
> 
>  
> 
> # freebsd-update fetch
> 
>  
> 
> [root@artvideo /home/sh]# freebsd-update fetch
> 
> Looking up update.FreeBSD.org mirrors... 4 mirrors found.
> 
> Fetching public key from update4.FreeBSD.org... failed.
> 
> Fetching public key from update3.FreeBSD.org... failed.
> 
> Fetching public key from update5.FreeBSD.org... failed.
> 
> Fetching public key from update2.FreeBSD.org... failed.
> 
> No mirrors remaining, giving up.
> 
>  
> 
> # freebsd-update -v debug fetch
> 
> # freebsd-update install
> 
>  
> 
> [root@artvideo /home/sh]# freebsd-update install
> 
> No updates are available to install.
> 
> Run '/usr/sbin/freebsd-update fetch' first.

Hello,

I'm not sure what are you trying to do, but if it's just patching the system
you can't use freebsd-update for it. You're running a custom-built system
with FreeBSD 8.2-STABLE and freebsd-update just works with standard systems.

To fix the vulnerabilities you can:

1) apply patches and rebuild as per each security advisory
2) Update source to RELENG_8 and upgrade using the procedure described here:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html

I hope it helps.

Regards.
Victor.
-- 
La prueba más fehaciente de que existe vida inteligente en otros
planetas, es que no han intentado contactar con nosotros. 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120111122121.GD39290>