Page 1 of 1

Security Avisories and spi

Posted: 14. Dec 2016, 21:40
by Bart
Is it safe to keep updated Salix with spi -u / spi -U? I ask this because it just come out a security fix related to the kernel that with these operations is not downloaded. The concern that I have is to lose any more security fixes.
What is the best way to keep updated Salix?

Re: Security Avisories and spi

Posted: 14. Dec 2016, 22:28
by DidierSpaier
By default kernel installations and upgrades are blacklisted in /etc/slapt-get/slapt-getrc because lilo or eliloconfig (depending if your firmware is BIOS/Legacy or EFI) should run after the kernel upgrade but before rebooting, otherwise the machine won't boot anymore.

But in slapt-get (not in spi) there is an option to bypass the blacklist:

Code: Select all

slapt-get --ignore-excludes --upgrade
Don't forget to run lilo or eliloconfig after that!

Re: Security Avisories and spi

Posted: 17. Dec 2016, 08:32
by mimosa
It may also be worth looking in the wiki about kernel upgrades, and similar. Depending on your situation, you may wish to approach it differently.

Also doing it that way would upgrade everything excluded, not just kernel-related packages, and that may not be what you want to do; in fact, it is probably a bad idea.

There are probably also instructions about this in the forum, if you search.