[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [SECURITY] [DSA 1565-1] New Linux 2.6.18 packages fix several vulnerabilities



This one time, at band camp, Peter Palfrader said:
> debian.org kernel packages don't however.  Which makes it not exactly
> suiteable for a nagios check for "is the running kernel the one on the
> fileystem".

This one time, at band camp, Noah Meyerhans said:
> I compare the ctime of the kernel image on the system with the machine's
> uptime.  It's the machine's been rebooted since the kernel image
> changed, we're up to date, otherwise we're still running an older
> kernel.  The attached shell script shows how.  You should be able to do
> this with a nagios check...

I also do some rummaging around to figure out what the meta package is
currently depending on, so that I know what vesion Debian currently
considers newest, then compare that to /proc/version.  That only works
for etch and newer kernel images, though, so I think I'll fall back to
Noah's method for older machines.
-- 
 -----------------------------------------------------------------
|   ,''`.                                            Stephen Gran |
|  : :' :                                        sgran@debian.org |
|  `. `'                        Debian user, admin, and developer |
|    `-                                     http://www.debian.org |
 -----------------------------------------------------------------

Attachment: signature.asc
Description: Digital signature


Reply to: