Mailinglist Archive: opensuse-security (257 mails)

["Sanz family" <sanz_family@xxxxxxxxxxxxx>]

	Mike,

	I just installed the newest kernel in my SuSE professional 8.0
so, I tried to see if the last kernel was there...

	These are the results:

Superman:~ # uname -a
Linux Superman 2.4.21-231-default #1 Mon Jun 28 15:39:34 UTC 2004 i686 i686
i386 GNU/Linux
Superman:~ # cd /boot
Superman:/boot # ls -lart
total 3744
-rw-r--r--    1 root     root        80324 Sep 23  2003 memtest.bin
-rw-r--r--    1 root     root        64824 Sep 23  2003 message
lrwxrwxrwx    1 root     root            1 Apr  8 07:11 boot -> .
drwxr-xr-x    2 root     root          496 Apr  8 07:22 grub
-rw-r--r--    1 root     root          512 Apr  8 07:22 backup_mbr
drwxr-xr-x   23 root     root          560 Jul 21 11:30 ..
-rw-r--r--    1 root     root        52328 Aug 12 10:21
config-2.4.21-243-default
-rw-r--r--    1 root     root       134396 Aug 12 10:22
Kerntypes-2.4.21-243-default
-rw-r--r--    1 root     root       630824 Aug 12 10:26
System.map-2.4.21-243-default
-rw-r--r--    1 root     root      1187139 Aug 12 10:26
vmlinuz-2.4.21-243-default
-rw-r--r--    1 root     root      1411413 Aug 12 11:02
vmlinux-2.4.21-243-default.gz
lrwxrwxrwx    1 root     root           26 Aug 18 14:09 vmlinuz ->
vmlinuz-2.4.21-243-default
-rw-r--r--    1 root     root       250592 Aug 18 14:09
initrd-2.4.21-243-default
lrwxrwxrwx    1 root     root           25 Aug 18 14:09 initrd ->
initrd-2.4.21-243-default
drwxr-xr-x    3 root     root          520 Aug 18 14:09 .
Superman:/boot # rpm -qa | grep -i kernel
kernel-source-2.4.21-243
kernel-docs-2.4.21-99

	It seems to me as if the last kernel upgrade (2.4.21-243) successfully
uninstalled
the kernel version I am currently running (2.4.21-231).

	Notice that since all the notices about problems with the new kernel, I
have not
rebooted yet...

	Am I missing something?

Best regards,
Erick Sanz




> -----Original Message-----
> From: Mike Rose [mailto:mr349@xxxxxxxxx]
> Sent: Wednesday, August 25, 2004 10:40 AM
> To: Ralf Ronneburger
> Cc: suse-security@xxxxxxxx
> Subject: Re: [suse-security] Bad quality of updates from SuSE ftp server
>
>
> When using:
> rpm -ivh kernel-whatever.rpm
>
> you get:
> ls -l /boot/*previous*
> lrwxrwxrwx  1 root root 27 Aug  5 09:59 /boot/initrd.previous ->
> ./initrd-2.6.5-7.75-default
> lrwxrwxrwx  1 root root 28 Aug  5 09:59 /boot/vmlinuz.previous ->
> ./vmlinuz-2.6.5-7.75-default
>
>
> If you are using grub then a simple bit of editing of /boot/grub/menu.lst
> something like this:
> "
> # color white/blue black/light-gray
> default 0
> timeout 10
>
> title Linux
>     kernel (hd0,0)/boot/vmlinuz root=/dev/hda1 vga=0x317 splash=silent
> acpi=off desktop resume=/
> dev/hda2 showopts
>     initrd (hd0,0)/boot/initrd
>
> title Previous Kernel
>     kernel (hd0,0)/boot/vmlinuz.previous root=/dev/hda1 vga=0x317
> splash=silent acpi=off desktop
>  resume=/dev/hda2 showopts
>     initrd (hd0,0)/boot/initrd.previous
>
> title No ACPI, APM, DMA or resume
>     kernel (hd0,0)/boot/vmlinuz root=/dev/hda1 showopts ide=nodma apm=off
> acpi=off vga=normal no
> resume nosmp noapic maxcpus=0  3
>     initrd (hd0,0)/boot/initrd
> "
>
>
> and you now have the previous kernel available.
>
>
> Mike Rose
> TCM & Biological Physics Computer Officer
> University of Cambridge
> http://www.bio.phy.cam.ac.uk/
> http://www.tcm.phy.cam.ac.uk/
>
> On Wed, 25 Aug 2004, Ralf Ronneburger wrote:
>
> > Hi,
> >
> > to add my 2 cents to the discussion about bad update-quality - I'm also
> > not satisfied the way it works in the last months. And as it is a fact,
> > that there where many problems especially with kernel-updates in the
> > last time it'd be a good idea for suse to not uninstall the old kernel
> > and delete it's config but to add the new kernel as default and leave
> > the old one as fallback on the system. It's not that we can't help
> > ourselfs if spamassasin or tripwire are broken, but updating a kernel on
> > a remote SuSE-system these days requires some delight in risk.
> >
> > Greetings,
> >
> > Ralf
> >
> >
>
> --
> Check the headers for your unsubscription address
> For additional commands, e-mail: suse-security-help@xxxxxxxx
> Security-related bug reports go to security@xxxxxxx, not here
>