Linux Labs

Server security / Stage 2 of 10

The update is in, the vulnerability is still alive

Not running Starting usually ~20 s
Leave the lesson

Step 3 of 7 · on a machine · 5 min

Restart and check

A restart is half the job. The other half is making sure the new process runs the new file.

After a restart the service has a new Main PID in systemctl status, and the time in the Active line is later than the upgrade. The exe link of the new process leads to a file without the mark, and sudo lsof +L1 no longer finds the process (in the Wiki). You check the process itself: the package version and the file in the directory became new back in the night.

Exercise · do it

Move the feed to the new program

Make the lab-feed service run the fixed program from the 1.1-1 package, and check it by its process.

Sign in and start The machine is available after signing in

Goals · 0 of 2

  • Run lab-feed with the fixed program not done yet
  • Keep the feed available not done yet

Step goals

0 of 2
  • Run lab-feed with the fixed program — not done yet
  • Keep the feed available — not done yet
Ubuntu 24.04

Step goals

0 of 2
  • Run lab-feed with the fixed program — not done yet
  • Keep the feed available — not done yet
Loading…