Re: Honeynet Project Honeywall update breakage

["Earl Sammons" <esammons () hush com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

All,

More details:
Fedora is now (I dont believe they did in the past?) distributing
snort/snort-mysql RPMS in the "Extras" repo.  Since the verion they
recently posted is newer than the version currently available in
roo yum natually wants to update using those from Fedoras repo.

Since I was a moron and _assumed_ this would never happen and didnt
explicitly prevent it by adding a simple one line item to the
fedora-extras.repo config... it will happen if you 'yum update' a
honeywall.  If this does happen, you will end up with a version of
snort/snort-mysql that is NOT compatible with the honeywall.

So, if you have not already broken your honeywall (by doing above
and updating snort/snort-mysql from the fedora-extras repo) please
do this:

yum update roo-base

This will update the roo "duc tape" RPM that has a fix to prevent
updating snort/snort-mysql from fedora-extras.

I'll have a solution to fix honeywalls that have been broken by
this unfortunate event momentarily.

Please note:  I am in no way placing any blame on the Fedora folks.
 We have a customn version of snort and theirs is likely a
"generic" (straight build) verion.  This is _completely_ my fault.
If roo-2.x (Can I say that yet?) architecture goes the way I hope
it will, we should never see this type of problem there :)

More soon.

Earl


On Thu, 23 Feb 2006 13:07:37 -0500 Earl Sammons <esammons () hush com>
wrote:
> All,
>
> Problem:
> running 'yum update' breaks snort/snort-mysql on all versions of
> the Honeynet Project "roo" Honeywall.
>
> Fix: In the works
>
> Temp Solution: Hold off on updating the Honeywall... Fix and more
> details on the way.
>
> Sorry about any inconveniance.
>
> Earl Sammons
-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 2.4

wkYEARECAAYFAkP+GlkACgkQk7+e+4lPSm1FHQCeP4lTEhNxRQ5f5jx3Y67ioBIHXt0A
oIYhMTY4by6oU215RI2NI3eQBaHL
=/SPS
-----END PGP SIGNATURE-----