Trying to figure out exactly what services should be restarted after patching openssl against Heartbleed. At least one post mentions restarting:
sshd, apache, nginx, postfix, dovecot, courier, pure-ftpd, bind, mysql
- Is there a command that can be run to see what running services are
dependent on openssl? - Is there a command to run against apache/nginx to see if the patch is active so the service doesn't need to be restarted?
- Should we just schedule downtime and reboot
every server entirely?
EDIT: This post suggests using: lsof -n | grep ssl | grep DEL
to display processes still using the old version of OpenSSL marked for deletion
No comments:
Post a Comment