aboutsummaryrefslogtreecommitdiff
path: root/usr.sbin/freebsd-update/freebsd-update.8
diff options
context:
space:
mode:
authorColin Percival <cperciva@FreeBSD.org>2008-08-02 00:09:41 +0000
committerColin Percival <cperciva@FreeBSD.org>2008-08-02 00:09:41 +0000
commit08e23bee1accccd3053b4009f0a5f384f68a6ad5 (patch)
tree4ef003dcae9e1440e8345a59c95d94fd94e53509 /usr.sbin/freebsd-update/freebsd-update.8
parent2cc8ab2a83eccbc77a2c20c9609c391ae4fb055f (diff)
downloadsrc-08e23bee1accccd3053b4009f0a5f384f68a6ad5.tar.gz
src-08e23bee1accccd3053b4009f0a5f384f68a6ad5.zip
Add "IDS" command to freebsd-update. This was present in the original
version of freebsd-update, but I took it out when I rewrote everything and added FreeBSD Update to the base system because I didn't think it was useful. It turns out that quite a few people liked it and wanted it back. Requested by: Royce Williams + others MFC after: 2 weeks
Notes
Notes: svn path=/head/; revision=181142
Diffstat (limited to 'usr.sbin/freebsd-update/freebsd-update.8')
-rw-r--r--usr.sbin/freebsd-update/freebsd-update.811
1 files changed, 11 insertions, 0 deletions
diff --git a/usr.sbin/freebsd-update/freebsd-update.8 b/usr.sbin/freebsd-update/freebsd-update.8
index f50d36a84ada..589886edd4c2 100644
--- a/usr.sbin/freebsd-update/freebsd-update.8
+++ b/usr.sbin/freebsd-update/freebsd-update.8
@@ -132,6 +132,9 @@ case there are any special steps needed for upgrading.
Install the most recently fetched updates or upgrade.
.It Cm rollback
Uninstall the most recently installed updates.
+.It Cm IDS
+Compare the system against a "known good" index of the
+installed release.
.El
.Sh TIPS
.Bl -bullet
@@ -144,6 +147,14 @@ to /etc/crontab will check for updates every night.
If your clock is set to UTC, please pick a random time
other than 3AM, to avoid overly imposing an uneven load
on the server(s) hosting the updates.
+.It
+In spite of its name,
+.Cm
+IDS should not be relied upon as an "Intrusion Detection
+System", since it if the system has been tampered with
+it cannot be trusted to operate correctly.
+If you intend to use this command for intrusion-detection
+purposes, make sure you boot from a secure disk (e.g., a CD).
.El
.Sh FILES
.Bl -tag -width "/etc/freebsd-update.conf"