[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Tip: Upgrading the SSH Daemon



On Fri, Dec 28, 2001 at 01:33:39PM +0200, guy keren wrote:
> 
> On Fri, 28 Dec 2001, Yotam Rubin wrote:
> 

Don't CC me, I read all the lists I'm subscribed to.

> > That's not necessary. sshd is forked for every incoming connection. It is
> > possible to connect to ssh, shut down the listening process and the session
> > will remain unharmed. Then you would go about installing sshd as normal,.
> > there's no reason to run two listening sshd's concurrently.
> 
> that is necessary, since if your active connection(s) die (e.g. the box
> gets rebooted due to power outage, or something similar) during the
> process - you're _possibly_ locked out, in case your new install isn't
> done properly.

Consider the following:
(It is presumed that you're using system's native packaging system to do
 the update )

1) You fetch the source package and the new upstream code. 
2) You add the new upstream code to the source and generate the package.
3) You install the package. (note that during this entire procedure, ssh is
   still running and listening)
4) You invoke '/etc/init.d/ssh restart' (Or where ever ssh's wrapper script 
   is located)

The only way this can leave your machine without an ssh process is if the 
init script exits after stopping ssh. The above procedure is as risky as
doing /etc/init.d/ssh remotely.


> 
> shlomi's doing things the same way. you and nadav are doing things the
> careless way. you'll get there faster if it works, but shlomi has a
> smaller 'Tochelet' (how's that called in english), if you account for both
> successfull and unsuccesfull installations.

The probability that the above procedure will fail is identical to the
probability that an evil lepracaun will consume your file system, i.e.,
not extremely likely.

	Best regards, Yotam Rubin

> 
> the good and carefull remote (sometimes also local) sysadmin will use
> shlomi's method for this single reason.
> 
> --
> guy
> 
> "For world domination - press 1,
>  or dial 0, and please hold, for the creator." -- nob o. dy
> 

=================================================================
To unsubscribe, send mail to linux-il-request@linux.org.il with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail linux-il-request@linux.org.il