Distributing kernel to identical machine (with MAC, AUDIT)

[Dimitar Vasilev]

Yup on 4 conditions:
1. you have serial console access to all machines.
2. you've tested that kernel works.
3. backed up the previous kernel
4. have  not raised securelevel to 1 and have added the proper
rc.confvalues and got the appropriate MAC labels handy.
If you have messed up with securelevel you can either setup loader.conf to
boot the kernel you want
or reboot with securelevel disabled and change the kernel then.
I'd rather start experimenting with a test machine.
MAC sometimes may shut off entire machine from internet, depending on
policies defined.
Good luck.

2007/5/26, mal content <artifact.one at googlemail.com>:
>
> I compiled a kernel with:
>
> options MAC
> options AUDIT
>
> I need to copy this kernel to a couple of (identical)
> machines. Assuming that I've just used vanilla defaults
> (with regards to CFLAGS, make.conf) and the hardware
> is identical, is it safe to just tar /boot/kernel and copy to
> the other machines? Or is there more that must be copied?
>
> As I understand it, these two options don't affect
> userland at all, so nothing other than the kernel needs
> to be copied...
>
> Please enlighten me,
> MC
>
> PS: please CC, I'm not subscribed.
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "
> freebsd-questions-unsubscribe at freebsd.org"
>



-- 
Димитър Василев
Dimitar Vassilev

GnuPG key ID: 0x4B8DB525
Keyserver: pgp.mit.edu
Key fingerprint: D88A 3B92 DED5 917E 341E D62F 8C51 5FC4 4B8D B525