Re: Checking for services to be restarted on a default Debian installation

2014-09-02 Thread Paul E Condon
On 20140901_2048+0200, Thijs Kinkhorst wrote: > Hi all, > > When using APT to install security updates, by default services using the > upgraded libraries are not restarted. Take for example openssl updates: > merely > doing apt-get update && apt-get upgrade is not enough to be safe: you also

Re: Checking for services to be restarted on a default Debian installation

2014-09-02 Thread Jameson Graef Rollins
On Tue, Sep 02 2014, Tom Dial wrote: > The needrestart package from jessie with package defaults appears to run > automatically and suggest, but not automatically perform, necessary > service restarts. This package is "Priority: optional", and therefore not installed by default. What about just

Re: [SECURITY] [DSA 3017-1] php-cas security update

2014-09-02 Thread Ryan J Hoots
On Sep 2, 2014 12:47 PM, "Thijs Kinkhorst" wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > - - > Debian Security Advisory DSA-3017-1 secur...@debian.org > http://www.debian.org/security/

Re: Checking for services to be restarted on a default Debian installation

2014-09-02 Thread Tom Dial
The needrestart package from jessie with package defaults appears to run automatically and suggest, but not automatically perform, necessary service restarts. On 09/02/2014 11:56 AM, Jameson Graef Rollins wrote: > On Tue, Sep 02 2014, Jack wrote: >> On 02/09/2014 18:04, Jameson Graef Rollins wrot

Re: Checking for services to be restarted on a default Debian installation

2014-09-02 Thread Jameson Graef Rollins
On Tue, Sep 02 2014, Jack wrote: > On 02/09/2014 18:04, Jameson Graef Rollins wrote: >> On Tue, Sep 02 2014, David Prévot wrote: >> >> Admins >> should have to manually run obscure scripts to check things like that. > > s/should have/should not have/ Yes, thank you for the correction. I defini

Re: Checking for services to be restarted on a default Debian installation

2014-09-02 Thread Jack
On 02/09/2014 18:04, Jameson Graef Rollins wrote: > On Tue, Sep 02 2014, David Prévot wrote: > > Admins > should have to manually run obscure scripts to check things like that. s/should have/should not have/ -- Jack. -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with

Re: Checking for services to be restarted on a default Debian installation

2014-09-02 Thread Jameson Graef Rollins
On Tue, Sep 02 2014, David Prévot wrote: > Le 02/09/2014 04:05, Yves-Alexis Perez a écrit : > >> It's quite certain that about nobody know about debian-goodies or >> checkrestart. > > The Securing Debian Manual recommends it, so hopefully you’re wrong. > > https://www.debian.org/doc/manuals/securi

Re: Checking for services to be restarted on a default Debian installation

2014-09-02 Thread David Prévot
Hi, Le 02/09/2014 04:05, Yves-Alexis Perez a écrit : > It's quite certain that about nobody know about debian-goodies or > checkrestart. The Securing Debian Manual recommends it, so hopefully you’re wrong. https://www.debian.org/doc/manuals/securing-debian-howto/ch4#s-lib-security-update Regar

Re: Checking for services to be restarted on a default Debian installation

2014-09-02 Thread Yves-Alexis Perez
On mar., 2014-09-02 at 00:11 +0300, Mikko Rapeli wrote: > As a workaround I, and hopefully most users, know about debian-goodies > and checkrestart, and figure out on their own if a reboot is > necessary. It's quite certain that about nobody know about debian-goodies or checkrestart. Regards, --