What distro of linux do you run on your server?
What is your uptime right now?

Here is mine:
Red Hat Linux release 7.1 (Seawolf)
1:51pm up 95 days, 23:01, 16 users, load average: 0.00, 0.00, 0.00

What's yours?

redhat 6.2

current uptime:
Uptime: 4:01pm up 8 days, 13:56, 2 users, load average: 0.37, 0.14, 0.09

we just rebooted a few days ago but it had been up for about 70 days before that....

on average we reboot every 2 months just to keep it fresh

I don't really keep track of linux security issues anymore, but are you sure the quarter-year old kernel you're using is still secure ?

Red Hat Linux release 6.1 (Cartman)
5:28am up 95 days, 14:35, 2 users, load average: 10.46, 8.81, 8.93

Red Hat Linux release 6.1 (Cartman)
5:33am up 95 days, 14:53, 1 user, load average: 0.41, 0.38, 0.46

Red Hat Linux release 7.0 (Guinness)
1:46am up 32 days, 14:41, 1 user, load average: 0.04, 0.05, 0.08

Red Hat Linux release 6.2 (Zoot)
6:34am up 54 days, 12:50, 1 user, load average: 1.24, 0.95, 0.86

Red Hat Linux release 7.1 (Seawolf)
2:17am up 32 days, 17:19, 1 user, load average: 0.01, 0.01, 0.00

Originally posted by T_E_O
I don't really keep track of linux security issues anymore, but are you sure the quarter-year old kernel you're using is still secure ?

These are the recent kernel security updates from RedHat:

- 2002-01-22 vpn vulnerability
- 2001-11-02 syncookie vulnerability
- 2001-10-16 ptrace bug
- 2001-04-17 ptrace & local ddos

So the last update I need is the one dated 2001-10-16, the 2001-11-02 one is only needed if I use firewall and TCP syn cookies (but I don't, or haven't), the latest one is definitely not needed for web hosting purpose.

Originally posted by priyadi


These are the recent kernel security updates from RedHat:

- 2002-01-22 vpn vulnerability
- 2001-11-02 syncookie vulnerability
- 2001-10-16 ptrace bug
- 2001-04-17 ptrace & local ddos

So the last update I need is the one dated 2001-10-16, the 2001-11-02 one is only needed if I use firewall and TCP syn cookies (but I don't, or haven't), the latest one is definitely not needed for web hosting purpose.

But a fix to this bug (http://www.securityfocus.org/bid/3444) might be advisable too :)
Ok, I admit, the day you rebooted the server with an uptime of 95 days, this patch was probably available already. As I said, I'm not keeping track of linux security issues anymore now that I'm running FreeBSD.
But from reading the above post, I understand that this patch is not available for RedHat ? Then I hope that you're using the 2.4.11 or .12 kernel version because it seems kind of dangerous to leave this bug unpatched. :)

FreeBSD 4.2-RELEASE

8:08AM up 136 days, 19:03, 2 users, load averages: 0.00, 0.00, 0.00

Wasn't there a thread like this already? :)

Originally posted by allera
FreeBSD 4.2-RELEASE

8:08AM up 136 days, 19:03, 2 users, load averages: 0.00, 0.00, 0.00

Wasn't there a thread like this already? :)

4.2-RELEASE ? that's scary man !

You DID update the telnet daemon, right ?
If not, I'd have a look at this page (http://www.securityfocus.org/cgi-bin/vulns-item.pl?section=exploit&id=3064) if I were you :)

Well if Telnet is not running, I don't need the patch, right? :) Actually, there are very few services running on the machine. It's behind a firewall anyway and the internet has very limited access to it. It's basically a testing server.

Who still runs Telnet anyway?

Originally posted by allera
Well if Telnet is not running, I don't need the patch, right? :) Actually, there are very few services running on the machine. It's behind a firewall anyway and the internet has very limited access to it. It's basically a testing server.

Who still runs Telnet anyway?

Hehe. You're right, in that case it doesn't matter :) But it sounded so... old :) hehe

[root@server1 root]# uptime
10:52am up 18 days, 19:15, 1 user, load average: 0.00 0.00 0.00

^^^ That server just went into the datacenter...



bash-2.05# uptime
10:09am up 3 days, 15:04, 1 user, load average: 0.08, 0.02, 0.01

^^^ Just put some new ram in that one..

And actually, not to go off topic - but why does it say bash-2.05? Shouldn't it be [root@server2 root]#?

You'd have to set the environment variable 'PS1' to accomplish that.
You can put it in /etc/profile if you like. Personally I prefer this value for PS1:

"[\u@\h]:\w\\$ "

RedHat 7.2:

11:03am up 62 days, 17:32, 1 user, load average: 0.17, 0.06, 0.01

Which is when I upgraded from Red Hat 7.1 to 7.2, prior to that, the uptime was:

4:50pm up 112 days, 21:10, 1 user, load average: 0.07, 0.02, 0.00

Which is when I moved it into that data center :).

Windows 2000 SP2 :)

Uptime: 2357 hours (about 98 days).

Originally posted by T_E_O


But a fix to this bug (http://www.securityfocus.org/bid/3444) might be advisable too :)
Ok, I admit, the day you rebooted the server with an uptime of 95 days, this patch was probably available already. As I said, I'm not keeping track of linux security issues anymore now that I'm running FreeBSD.
But from reading the above post, I understand that this patch is not available for RedHat ? Then I hope that you're using the 2.4.11 or .12 kernel version because it seems kind of dangerous to leave this bug unpatched. :)

You're right. I have to check it out soon. Scramble! Scramble!

This is the kind of bug that makes me nervous. I have to install a new kernel on the server (at the other side of the world), reboot, then pray the system will come back fine. If not I need to deal with datacenter guys, and probably shell out a few bucks along the way. :(

Originally posted by priyadi


You're right. I have to check it out soon. Scramble! Scramble!

This is the kind of bug that makes me nervous. I have to install a new kernel on the server (at the other side of the world), reboot, then pray the system will come back fine. If not I need to deal with datacenter guys, and probably shell out a few bucks along the way. :(

I can imagine that. Wouldn't be too happy either if I'd have to do that :( I'm glad the datacenter I'll be using is located about 40 kilometers from where I'm living...
Wish you best of luck with the upgrade ! :)

I have several...

Red Hat
3:33pm up 296 days, 1:31, 1 user, load average: 0.00, 0.00, 0.00

Debian
3:19pm up 148 days, 19:14, 2 users, load average: 0.00, 0.00, 0.00

3:36pm up 74 days, 15:15, 2 users, load average: 0.00, 0.00, 0.00

BSDi (BSD/OS)
3:37PM up 448 days, 2:10, 1 user, load averages: 1.29, 1.47, 1.31

Debian
6:47pm up 276 days, 6:10, 1 user, load average: 0.07, 0.02, 0.04

hhollllllyyyyyyyyyyyyyy !!!!!!!

400+
wow

Hehe.. a friend of mine has a box that's been running for over 1100 days now, but it ain't got any customers on it...
He's connected the 5 volts of the machine through a car battery or so. So if the power fails, the box loses all its power, except for the +5 volts to keep the memory, chipset, cpu etc. running :)