Full Disclosure mailing list archives
Re: Security Updates Without Rebooting
From: Valdis.Kletnieks () vt edu
Date: Tue, 08 Nov 2005 22:18:17 -0500
On Wed, 09 Nov 2005 01:48:33 +0100, Joxean Koret said:
In some cases you can hot-patch a kernel without rebooting the system, loading a module (lkm) with the patch inside.
Note that this is serious double-or-nothing here, because it's just *so* easy to totally screw the pooch doing this, and ending up with an outage *much* longer than a 'shutdown -r' would have caused. Worst case is a stray pointer causing subtle filesystem damage, undetected for a while...... A much more cost-effective scheme would be 2 systems in a fail-over config, so that you can reboot one and then the other without a disruption.
Attachment:
_bin
Description:
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Security Updates Without Rebooting Carlos Silva aka|Danger_Man| (Nov 07)
- Re: Security Updates Without Rebooting Stuart Low (Nov 07)
- Re: Security Updates Without Rebooting Valdis . Kletnieks (Nov 07)
- Re: Security Updates Without Rebooting Tomasz Nidecki (Nov 08)
- Re: Security Updates Without Rebooting Valdis . Kletnieks (Nov 07)
- Re: Security Updates Without Rebooting Alexander Sotirov (Nov 07)
- Re: Security Updates Without Rebooting Valdis . Kletnieks (Nov 07)
- Re: Security Updates Without Rebooting Marco Ermini (Nov 14)
- Re: Security Updates Without Rebooting Valdis . Kletnieks (Nov 07)
- Re: Security Updates Without Rebooting Joxean Koret (Nov 08)
- Re: Security Updates Without Rebooting Valdis . Kletnieks (Nov 08)
- Re: Security Updates Without Rebooting Joachim Schipper (Nov 09)
- Re: Security Updates Without Rebooting Stuart Low (Nov 07)