PatchReboot

From My Admin Page
Jump to: navigation, search

Each of the following packages requires {1} a reboot in order to be fully-utilized. This list is for informational use and subject to change at Red Hat's discretion.

   Red Hat Enterprise Linux 5:
       kernel
       kernel-smp
       kernel-PAE
       kernel-xen
       glibc2
       hal
   Red Hat Enterprise Linux 6:
       kernel
       *-firmware-*
       glibc {2}
       hal
   Red Hat Enterprise Linux 7:
       kernel
       glibc {2}
       linux-firmware
       systemd
       udev

For packages that provide a service (e.g. xen, bind, cronie, cups, ntp, openssh-server), restarting the service after updating the package is sufficient to make use of the updated binaries {3,4}. Similarly to system reboots, Red Hat is aware that restarting services may also incur downtime for the provided service.

For packages that provide both services and daemons (e.g. dbus), restarting all daemons and services by bringing the system down to single user mode (runlevel 1), and back up to the previous runlevel, is the recommended best practice.



{1} Note : This doesn't mean it is strictly required to reboot the system immediately after updating these packages. ↩ ***

{2} Typically it is sufficient to restart services after applying a non-security glibc erratum (i.e. RHBA rather than RHSA). The restarted services will immediately make use of the new glibc runtime. Until that time, such services will continue to use the earlier version of those libraries, having been loaded by the dynamic linker at service startup. Note that, depending on the nature of the bug being fixed, it may not be necessary to immediately restart the service. Lastly, disk space will continue to be consumed by the old runtimes until all packages referencing them close their open file descriptors allowing the kernel to free the reserved storage. ↩

{3} This excludes any updates to packages which have an explicit or implicit dependency on kernel updates; in these cases a reboot is still required to benefit from the updates to those packages. ↩

{4} Updates to security-sensitive libraries, such as openssl and gnutls, are especially important. Any services that depend on such libraries should be restarted to ensure that related errata are effectively used. In the case of updates to significant vulnerabilities, a full reboot is still the conservatively correct approach. ↩