Web Hosting Talk







View Full Version : Dangerous Kernel Update


SynHost
03-21-2003, 11:04 AM
I've just dowloaded:

kernel-2.4.18-27.7.x.i686.rpm

to my Red Hat Linux 7.2 machine to fix the security hole. I know installing kernel updates is pretty dangerous.. Especially considering I don't have physical access to the machine (its in a datacenter, I use ssh only).

Is there much danger in just doing a rpm -iv on this?

Thanks,
Ben

rigor
03-21-2003, 11:07 AM
at least check the md5 on it first, to assume a rpm source is secure, is very naieve (sp?)

Bob Ray
03-21-2003, 12:06 PM
Helly SYNhost

You may find it easyer to use up2date to update the kernel at least then you know you are getting it from a safe scource.

Updating details in up2date below, just type the commands.


up2date -f kernel kernel-headers kernel-source
quotacheck -auvgfm -F vfsv0
quotacheck -auvgfm -F vfsold
quotaon -auf
quotaon -au :D

MBC
03-21-2003, 12:40 PM
I have updated my last 2 kernels with the Redhat RPM and have had no problems. I have never used up2date to do it.

Bob Ray
03-21-2003, 12:50 PM
Originally posted by MBC
I have updated my last 2 kernels with the Redhat RPM and have had no problems. I have never used up2date to do it.

I have used up2date on six servers, all with ensim its pretty handy to do and works very well.

What put me off using the rpm was I had a box ages ago in which I was updating with the rpm version and after a reboot it went into a loop and I had to get a restore. It was a clean install no idea why the box went into a reboot loop nither had ev1.

Maybe i was just unlucky.

pyoor
03-21-2003, 04:17 PM
Bob Ray - you shouldn't use up2date on an Ensim server... Ensim requires you to use its proprietary packages. Using vanilla redhat rpm's is likely to FUBAR your box. Go to www.ensim.com -> Updates -> Linux webppliance -> get patches from there... there is also a repository of Ensim rpm's at http://www.cheetaweb.com/rpms.php

TBNnet
03-21-2003, 05:19 PM
Originally posted by pyoor
Bob Ray - you shouldn't use up2date on an Ensim server... Ensim requires you to use its proprietary packages. Using vanilla redhat rpm's is likely to FUBAR your box. Go to www.ensim.com -> Updates -> Linux webppliance -> get patches from there... there is also a repository of Ensim rpm's at http://www.cheetaweb.com/rpms.php

Hey Pyoor

If you look about the Ev1 forums http://forums.rackshack.net u will see the likes of gpan owner of cheetaweb, teck7 creator of SIM etc... use them,

You will also notice that its ok to update certain things with up2date, the kernel is one of these things ;)

Check out the forums man you will notice what you can and cant update via up2date with Ensim.

Bob Ray
03-21-2003, 05:22 PM
Originally posted by TBNnet
Hey Pyoor

If you look about the Ev1 forums http://forums.rackshack.net u will see the likes of gpan owner of cheetaweb, teck7 creator of SIM etc... use them,

You will also notice that its ok to update certain things with up2date, the kernel is one of these things ;)

Check out the forums man you will notice what you can and cant update via up2date with Ensim.

Agreed :D

TheSpidre
03-21-2003, 06:01 PM
Originally posted by MBC
I have updated my last 2 kernels with the Redhat RPM and have had no problems. I have never used up2date to do it.

up2date asks me to register?:confused:

MBC
03-21-2003, 06:55 PM
You have to register with Red Hat Network before you can use up2date.

SynHost
03-22-2003, 10:58 AM
Also - I have PlesK - will either up2date or the RPM updates break PlesK?

Thanks,
Ben

DaveNET
03-23-2003, 11:31 AM
Hi,

In regards to Plesk, I'm using the RPM version and last week I contacted Plesk support about upgrading my RedHat O/S using RPMs. I was told directly by Plesk that I can update ANY part of my O/S using RPMs, and there would be no problems.

I then had my tech do a series of updates from a remote location via SSH, and there were no problems encountered. We did upgrade the Kernel during this process as well.

Right now I'm running Plesk 5.04 RPM version and plan on upgrading the Plesk package to 5.05 this week (now that the O/S upgrades and patches are complete).

David

placrosse
03-23-2003, 07:17 PM
up2date -f kernel

reboot

works everytime :D

sethgarnar
03-23-2003, 07:21 PM
never do a up2date kernel without knowing how the server was installed, for example, I had to use a driver for my fast track100 raid card when I installed Red Hat. If I was to do a plain rpm or up2date insatll of the new kernel right now and reboot, the box would not come up. make sure you dont need to mod the kernel for any drivers before you update.

SynHost
03-23-2003, 07:26 PM
sure has heck does not, when doing an up2date -l I get a segmentation fault - yeah thats great.

SynHost
03-23-2003, 07:29 PM
Getting headers for available packages...
Segmentation fault###########


Haha - actually it all works after an up2date up2date - I guess you can up2date an up2date.