Re: Checking for services to be restarted on a default Debian installation

2014-09-10 Thread Thomas Liske
On 09/08/2014 06:33 AM, David Prévot wrote: Le 07/09/2014 10:54, Paul Wise a écrit : On Sun, Sep 7, 2014 at 9:30 PM, David Prévot wrote: How does it work if the upgrade run in the background? Will all needed service be restarted without asking? (If so, the gdm3 restart issue may be a

Re: Checking for services to be restarted on a default Debian installation

2014-09-10 Thread David Prévot
[ Still replying on security since that’s where the thread started, but feel free to follow up on private maintainer’s list since it becomes off topic for security. ] Hi Thomas, Le 10/09/2014 14:29, Thomas Liske a écrit : The debconf stuff is upstream and IMHO *not* a 3.9.1 Prompting in

Re: Checking for services to be restarted on a default Debian installation

2014-09-07 Thread Paul Wise
On Tue, Sep 2, 2014 at 2:48 AM, Thijs Kinkhorst wrote: I think it would help the security of the average Debian system if some tool to restart services after package upgrades was installed by default. There's checkrestart from debian-goodies, but since Jessie also the a bit more modern

Re: Checking for services to be restarted on a default Debian installation

2014-09-07 Thread David Prévot
Le 07/09/2014 02:07, Paul Wise a écrit : On Tue, Sep 2, 2014 at 2:48 AM, Thijs Kinkhorst wrote: In jessie there is also whatmaps. The results from checkrestart seem to be different to needrestart in many cases, since the latter ignores some services that are problematic/impossible to restart

Re: Checking for services to be restarted on a default Debian installation

2014-09-07 Thread Paul Wise
On Sun, Sep 7, 2014 at 9:30 PM, David Prévot wrote: It doesn’t seem to work as expected: it defaults to restart gdm3 where I stand. Could you file a bug about that? The default needrestart blacklist contains /usr/sbin/gdm3 so that shouldn't happen. Not restarting by default the DM seems to

Re: Checking for services to be restarted on a default Debian installation

2014-09-07 Thread Eirik Schwenke
On 7 September 2014 15:30:22 CEST, David Prévot taf...@debian.org wrote: Le 07/09/2014 02:07, Paul Wise a écrit : On Tue, Sep 2, 2014 at 2:48 AM, Thijs Kinkhorst wrote: My questions to this list: - Do people agree that this would be something that's good to have in a default installation? Are

Re: Checking for services to be restarted on a default Debian installation

2014-09-07 Thread David Prévot
Le 07/09/2014 10:54, Paul Wise a écrit : On Sun, Sep 7, 2014 at 9:30 PM, David Prévot wrote: How does it work if the upgrade run in the background? Will all needed service be restarted without asking? (If so, the gdm3 restart issue may be a blocker). Not sure what you mean by 'in the

Re: Checking for services to be restarted on a default Debian installation

2014-09-07 Thread Riku Valli
On 08.09.2014 07:33, David Prévot wrote: Le 07/09/2014 10:54, Paul Wise a écrit : On Sun, Sep 7, 2014 at 9:30 PM, David Prévot wrote: How does it work if the upgrade run in the background? Will all needed service be restarted without asking? (If so, the gdm3 restart issue may be a blocker).

Re: Checking for services to be restarted on a default Debian installation

2014-09-03 Thread Gian Piero Carrubba
* [Mon, Sep 01, 2014 at 08:48:25PM +0200] Thijs Kinkhorst: [needrestart] - Do people agree that this would be something that's good to have in a default installation? Are there drawbacks? I like needrestart and I added it to my standard toolbox since its admission in Debian (well, it took

Re: Checking for services to be restarted on a default Debian installation

2014-09-03 Thread Michael Stone
On Tue, Sep 02, 2014 at 01:41:05PM -0700, Jameson Graef Rollins wrote: This package is Priority: optional, and therefore not installed by default. What about just making it important or required? On my system it pulled in more than 20MB of dependencies. That's a lot to push onto every debian

Re: Checking for services to be restarted on a default Debian installation

2014-09-03 Thread Thijs Kinkhorst
On Wed, September 3, 2014 15:05, Michael Stone wrote: On Tue, Sep 02, 2014 at 01:41:05PM -0700, Jameson Graef Rollins wrote: This package is Priority: optional, and therefore not installed by default. What about just making it important or required? On my system it pulled in more than 20MB of

Re: Checking for services to be restarted on a default Debian installation

2014-09-03 Thread Jameson Graef Rollins
On Wed, Sep 03 2014, Michael Stone mst...@debian.org wrote: On Tue, Sep 02, 2014 at 01:41:05PM -0700, Jameson Graef Rollins wrote: This package is Priority: optional, and therefore not installed by default. What about just making it important or required? On my system it pulled in more than

Re: Checking for services to be restarted on a default Debian installation

2014-09-03 Thread Wadih Maalouf
On Wed, 3 Sep 2014, Jameson Graef Rollins wrote: On Wed, Sep 03 2014, Michael Stone mst...@debian.org wrote: On Tue, Sep 02, 2014 at 01:41:05PM -0700, Jameson Graef Rollins wrote: This package is Priority: optional, and therefore not installed by default. What about just making it important

Re: Checking for services to be restarted on a default Debian installation

2014-09-03 Thread Michael Stone
On Wed, Sep 03, 2014 at 11:34:46AM -0700, Jameson Graef Rollins wrote: Is 20MB really a lot? That seems like essentially nothing to me nowadays. I'm in the middle of a 2.2GB upgrade right now. It sure is for people doing minimal installations in a number of contexts. Yeah, it's nothing

Re: Checking for services to be restarted on a default Debian installation

2014-09-02 Thread Yves-Alexis Perez
On mar., 2014-09-02 at 00:11 +0300, Mikko Rapeli wrote: As a workaround I, and hopefully most users, know about debian-goodies and checkrestart, and figure out on their own if a reboot is necessary. It's quite certain that about nobody know about debian-goodies or checkrestart. Regards, --

Re: Checking for services to be restarted on a default Debian installation

2014-09-02 Thread David Prévot
Hi, Le 02/09/2014 04:05, Yves-Alexis Perez a écrit : It's quite certain that about nobody know about debian-goodies or checkrestart. The Securing Debian Manual recommends it, so hopefully you’re wrong. https://www.debian.org/doc/manuals/securing-debian-howto/ch4#s-lib-security-update

Re: Checking for services to be restarted on a default Debian installation

2014-09-02 Thread Jameson Graef Rollins
On Tue, Sep 02 2014, David Prévot taf...@debian.org wrote: Le 02/09/2014 04:05, Yves-Alexis Perez a écrit : It's quite certain that about nobody know about debian-goodies or checkrestart. The Securing Debian Manual recommends it, so hopefully you’re wrong.

Re: Checking for services to be restarted on a default Debian installation

2014-09-02 Thread Jack
On 02/09/2014 18:04, Jameson Graef Rollins wrote: On Tue, Sep 02 2014, David Prévot taf...@debian.org wrote: Admins should have to manually run obscure scripts to check things like that. s/should have/should not have/ -- Jack. -- To UNSUBSCRIBE, email to

Re: Checking for services to be restarted on a default Debian installation

2014-09-02 Thread Jameson Graef Rollins
On Tue, Sep 02 2014, Jack j...@jackpot.uk.net wrote: On 02/09/2014 18:04, Jameson Graef Rollins wrote: On Tue, Sep 02 2014, David Prévot taf...@debian.org wrote: Admins should have to manually run obscure scripts to check things like that. s/should have/should not have/ Yes, thank you for

Re: Checking for services to be restarted on a default Debian installation

2014-09-02 Thread Tom Dial
The needrestart package from jessie with package defaults appears to run automatically and suggest, but not automatically perform, necessary service restarts. On 09/02/2014 11:56 AM, Jameson Graef Rollins wrote: On Tue, Sep 02 2014, Jack j...@jackpot.uk.net wrote: On 02/09/2014 18:04, Jameson

Re: Checking for services to be restarted on a default Debian installation

2014-09-02 Thread Jameson Graef Rollins
On Tue, Sep 02 2014, Tom Dial tdd...@comcast.net wrote: The needrestart package from jessie with package defaults appears to run automatically and suggest, but not automatically perform, necessary service restarts. This package is Priority: optional, and therefore not installed by default.

Checking for services to be restarted on a default Debian installation

2014-09-01 Thread Thijs Kinkhorst
Hi all, When using APT to install security updates, by default services using the upgraded libraries are not restarted. Take for example openssl updates: merely doing apt-get update apt-get upgrade is not enough to be safe: you also need to restart Apache, Postfix, ... Although well-trained

Re: Checking for services to be restarted on a default Debian installation

2014-09-01 Thread Cyril Brulebois
Thijs Kinkhorst th...@debian.org (2014-09-01): My questions to this list: - Do people agree that this would be something that's good to have in a default installation? Are there drawbacks? Having to know about debian-goodies always looked awkward to me. A dedicated, easy to identify package

Re: Checking for services to be restarted on a default Debian installation

2014-09-01 Thread Mikko Rapeli
Long ago I started one thread about making security updates effective, so... On Mon, Sep 01, 2014 at 08:48:25PM +0200, Thijs Kinkhorst wrote: My questions to this list: - Do people agree that this would be something that's good to have in a default installation? Are there drawbacks? Well,