Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | RE: WSUS/Reboot |
|---|---|
| Date: | Sat, 25 Jun 2005 14:52:45 -0700 |
Did someone ever tell Microsoft that they should have a look on unixoid systems. The only scenario a unixoid box _must_ be rebooted is, when the kernel has been patched or the main glibc must be changed for some reasons. But even the latter does not mean to always you need to reboot the system.
Reducing reboots is something that I know is a priority for Microsoft, and you're right - having systems rebooting all the time is a problem, even if they're just desktops. I think you'll see improvement on this over time, and one of the new features of WSUS I notice is immediate application of patches that don't need reboots. However, they way that you get this system uptime on most *nix systems is to drop the service in question, apply patches and restart the service. IMHO, if the system's job is to provide that service, there is only a little difference between bouncing the service and bouncing the box. If you take the same approach on a Windows server, you will often find that you get similar gains. For example, back when there were enough IIS patches to worry about, you could stop the web service and if the patch were applied when then server wasn't up, it didn't need a reboot. You'd then restart the service once the patch was applied. Many of the patches only trigger a reboot if a file that needed to be replaced will only get replaced on reboot. IMHO, it would be a good thing if the patch were to do this on it's own, but in the meantime you can certainly do it yourself. --------------------------------------------------------------------------- ---------------------------------------------------------------------------
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | RE: Using Messenger Service for 'Net Send' Functionality --- Dangerous?Why?, Kern, Tom |
|---|---|
| Next by Date: | RE: Using Messenger Service for 'Net Send' Functionality --- Dangerous?Why?, David LeBlanc |
| Previous by Thread: | Re: WSUS/Reboot, Martin Mewes |
| Next by Thread: | Re: WSUS/Reboot, Susan Bradley |
| Indexes: | [Date] [Thread] [Top] [All Lists] |