Changeset 59fef4c

Timestamp:

05/15/2021 06:55:02 PM (3 years ago)

Author:

Xi Ruoyao <xry111@…>

Branches:

11.0, 11.0-rc1, 11.0-rc2, 11.0-rc3, 11.1, 11.1-rc1, 11.2, 11.2-rc1, 11.3, 11.3-rc1, 12.0, 12.0-rc1, 12.1, 12.1-rc1, arm, bdubbs/gcc13, ml-11.0, multilib, renodr/libudev-from-systemd, s6-init, trunk, xry111/arm64, xry111/arm64-12.0, xry111/clfs-ng, xry111/lfs-next, xry111/loongarch, xry111/loongarch-12.0, xry111/loongarch-12.1, xry111/mips64el, xry111/pip3, xry111/rust-wip-20221008, xry111/update-glibc

Children:

7fbfed56

Parents:

80838616

git-author:

Xi Ruoyao <xry111@…> (05/15/2021 06:52:59 PM)

git-committer:

Xi Ruoyao <xry111@…> (05/15/2021 06:55:02 PM)

Message:

generalize ken's note for shared library update, ...

and move it into package management section

Location:

chapter08

Files:

• openssl.xml (modified) (1 diff)
• pkgmgt.xml (modified) (2 diffs)

chapter08/openssl.xml

@@ -91 +91 @@
       <para>
         However, any running programs linked to those libraries need to be stopped
-        and restarted. The following command, run as
-        <systemitem class="username">root</systemitem> after udating, will list what is
-        using the old versions of those libraries:
+        and restarted. Read the related entries in
+        <xref linkend='pkgmgmt-upgrade-issues'/> for details.
       </para>
 
-<screen><userinput role="nodump">grep -l  -e 'libssl.*deleted' -e 'libcrypto.*deleted' /proc/*/maps |
-   tr -cd 0-9\\n | xargs -r ps u</userinput></screen>
-
-      <para>
-        If you used <application>OpenSSH</application> to login to the system, you
-        need to logout, login again, and rerun that command to confirm nothing is
-        still using the deleted libraries.
-      </para>
     </note>
 

chapter08/pkgmgt.xml

@@ -42 +42 @@
   fits your need.</para>
 
-  <sect2>
+  <sect2 id='pkgmgmt-upgrade-issues'>
     <title>Upgrade Issues</title>
 
@@ -92 +92 @@
       scheme of library files suddenly.</para> </listitem>
 
+      <listitem> <para>If a package containing a shared library is updated,
+      and the name of library doesn't change, but a severe issue
+      (especially, a security vulnerability) is fixed, all running programs
+      linked to the shared library should be restarted.  The following
+      command, run as <systemitem class="username">root</systemitem> after
+      updating, will list what is using the old versions of those libraries
+      (replace <replaceable>libfoo</replaceable> with the name of the
+      library):</para>
+
+<screen><userinput role="nodump">grep -l  -e '<replaceable>libfoo</replaceable>.*deleted' /proc/*/maps |
+   tr -cd 0-9\\n | xargs -r ps u</userinput></screen>
+
+      <para>
+        If <application>OpenSSH</application> is being used for accessing
+        the system and it is linked to the updated library, you need to
+        restart <command>sshd</command> service, then logout, login again,
+        and rerun that command to confirm nothing is still using the
+        deleted libraries.
+      </para></listitem>
     </itemizedlist>