Kingu Logs

Security Patches

6.4-RELEASE to 6.4-RELEASE-p10

• kingu# freebsd-update fetch

The following files will be updated as part of updating to 6.4-RELEASE-p10:
/boot/kernel/kernel
/etc/mtree/BSD.var.dist
/lib/libc.so.6
/lib/libcrypto.so.4
/rescue/[
/rescue/atacontrol
/rescue/atm
/rescue/atmconfig
/rescue/badsect
/rescue/bsdlabel
/rescue/bunzip2
/rescue/bzcat
/rescue/bzip2
/rescue/camcontrol
/rescue/cat
/rescue/ccdconfig
/rescue/chflags
/rescue/chio
/rescue/chmod
/rescue/chroot
/rescue/clri
/rescue/cp
/rescue/csh
/rescue/date
/rescue/dd
/rescue/devfs
/rescue/df
/rescue/dhclient
/rescue/disklabel
/rescue/dmesg
/rescue/dump
/rescue/dumpfs
/rescue/dumpon
/rescue/echo
/rescue/ed
/rescue/ex
/rescue/expr
/rescue/fastboot
/rescue/fasthalt
/rescue/fdisk
/rescue/fore_dnld
/rescue/fsck
/rescue/fsck_4.2bsd
/rescue/fsck_ffs
/rescue/fsck_msdosfs
/rescue/fsck_ufs
/rescue/fsdb
/rescue/fsirand
/rescue/gbde
/rescue/getfacl
/rescue/groups
/rescue/gunzip
/rescue/gzcat
/rescue/gzip
/rescue/halt
/rescue/hostname
/rescue/id
/rescue/ifconfig
/rescue/ilmid
/rescue/init
/rescue/ipf
/rescue/kenv
/rescue/kill
/rescue/kldconfig
/rescue/kldload
/rescue/kldstat
/rescue/kldunload
/rescue/ldconfig
/rescue/link
/rescue/ln
/rescue/ls
/rescue/md5
/rescue/mdconfig
/rescue/mdmfs
/rescue/mkdir
/rescue/mknod
/rescue/mount
/rescue/mount_cd9660
/rescue/mount_devfs
/rescue/mount_ext2fs
/rescue/mount_fdescfs
/rescue/mount_linprocfs
/rescue/mount_msdosfs
/rescue/mount_nfs
/rescue/mount_ntfs
/rescue/mount_nullfs
/rescue/mount_procfs
/rescue/mount_std
/rescue/mount_udf
/rescue/mount_umapfs
/rescue/mount_unionfs
/rescue/mv
/rescue/newfs
/rescue/newfs_msdos
/rescue/nos-tun
/rescue/pax
/rescue/ping
/rescue/ping6
/rescue/ps
/rescue/pwd
/rescue/rcorder
/rescue/rcp
/rescue/rdump
/rescue/realpath
/rescue/reboot
/rescue/red
/rescue/rescue
/rescue/restore
/rescue/rm
/rescue/rmdir
/rescue/route
/rescue/routed
/rescue/rrestore
/rescue/rtquery
/rescue/rtsol
/rescue/savecore
/rescue/sconfig
/rescue/setfacl
/rescue/sh
/rescue/slattach
/rescue/spppcontrol
/rescue/startslip
/rescue/stty
/rescue/swapon
/rescue/sync
/rescue/sysctl
/rescue/tar
/rescue/tcsh
/rescue/test
/rescue/tunefs
/rescue/umount
/rescue/unlink
/rescue/vi
/rescue/whoami
/rescue/zcat
/sbin/init
/usr/bin/dig
/usr/bin/host
/usr/bin/nslookup
/usr/bin/nsupdate
/usr/bin/openssl
/usr/include/openssl/asn1.h
/usr/include/sys/event.h
/usr/include/sys/pipe.h
/usr/lib/libc.a
/usr/lib/libc_pic.a
/usr/lib/libcrypto.a
/usr/lib/libopie.a
/usr/lib/libopie.so.4
/usr/lib/libssl.a
/usr/lib/libssl.so.4
/usr/libexec/ftpd
/usr/libexec/lukemftpd
/usr/sbin/dnssec-keygen
/usr/sbin/dnssec-signzone
/usr/sbin/freebsd-update
/usr/sbin/lwresd
/usr/sbin/named
/usr/sbin/named-checkconf
/usr/sbin/named-checkzone
/usr/sbin/ntpd
/usr/sbin/rndc-confgen
/var/db/freebsd-update

• kingu# freebsd-update install
• kingu# reboot now

Upgrade ports

• kingu# portupgrade -rf libiconv
  • Also updates libgpg-error, p5-Locale-gettext, help2man, popt, gio-fam-backend, bash

Install screen

• Install /usr/ports/sysutils/screen

Upgrade ports

• kingu# portupgrade -r portaudit
• kingu# portupgrade -rf python26
  • Also updates glib20, gamin, gio-fam-backend, mc
• kingu# portupgrade -rf graphics/png
  • Also updates libslang2 and mc
• kingu# portupgrade -rf m4
  • Also updates autoconf262, automake19, bison, automake110
• kingu# portupgrade -rf pcre
• kingu# portupgrade -rf lang/ruby18
  • Also updates ruby-bdb, portupgrade
• kingu# portupgrade -rf openldap-client
  • Also updates samba3
• kingu# portupgrade -rf libgcrypt
  • Also updates cups-client
• kingu# portupgrade -rf gnutls
• kingu# portupgrade -rf gettext

NOTES:

Version of samba installed is 3.0.37 which is no longer supported (see Samba3_Release_Planning). Should upgrade to the latest version in ports which is 3.4.8. Read /usr/ports/UPDATING before upgrading.

Finalize NFSd and exports

Reference: FreeBSD Handbook

• Create user and group pierce on Kingu
• Edit /etc/exports file

 /usr/backup        -mapall=pierce:pierce        192.168.3.253

• Edit /etc/rc.conf

 # Enable NFSd
 rpcbind_enable="YES"
 nfs_server_enable="YES"
 mountd_flags="-r"
 nfs_client_enable="YES"

• Restart servers

 kill -HUP `cat /var/run/mountd.pid`
 rpcbind
 nfsd -u -t -n 4
 mountd -r