checkrestart - Online in the Cloud

PROGRAM:

NAME

checkrestart - check which processes need to be restarted after an upgrade

SYNOPSIS

checkrestart [ -hvpan ] [ -b blacklist_file ] [ -i package_name ] [ -e pid ]

DESCRIPTION

The checkrestart program tries to determine if there are processes in the system that need
to be restarted after a system upgrade. This is necessary since an upgrade will usually
bring new system libraries and running processes will be still using the old versions of
the libraries. In stable Debian GNU/Linux systems this is typically needed to eliminate a
system exposure to a vulnerability which might have been fixed by upgrading a library
which that process makes use of.

Consequently, checkrestart is sometimes used as an audit tool to find outdated versions of
libraries in use, particularly after security upgrades. Administrators should not,
however, rely on its output completely (see BUGS below).

This script needs to run as root in order to obtain the information it needs for analysis.

OPTIONS

-h, --help
Show the program help and exit.

-v, --verbose
Generate detailed output. This output includes the list of all processes found
using deleted files or descriptors as well as the deleted files and descriptors
found.

-p, --package
Only process deleted files that belong to a package, ignoring deleted files which
do not have an associated package in the package system.

-a, --all
Process all deleted files regardless of location. This makes the program analyse
deleted files even if they would be discarded because they are located in
locations, such as /tmp , which are known to produce false positives. It will take
preceded if used simultaneously with the -p option.

-b file, --blacklist=file
Read a blacklist of regular expressions from file. Any files matching the patterns
will be ignored. More than one pattern can be provided by using this option more
than once.

-i name, --ignore=name
Ignore services that are associated to the package name provided in name. More
than one package can be provided by using this option more than once.

-e pid, --excludepid=pid
Exclude processes running with pid when looking for open files. This can speed up
checkrestart on systems with a large number of open files. Note: this option only
works if lsof(8) is not used. More than one process identifier can be provided by
using this option more than once.

-n, --nolsof
Do not use lsof(8) even if available. In some systems where there are large number
of files the use of lsof might be inefficient. Use this option to disable lsof.
Notice also that if lsof is not installed an alternative mechanism to extract
deleted files will be used instead. Consequently, there is no need to set this
option in systems that do not have lsof(8) installed.

EXIT STATUS

The program will exit with error (1) if a non-root user tries to run it. Otherwise, it
will always exit with error status 0.

EXAMPLE

Start it as user root without parameters:

# checkrestart
Found 20 processes using old versions of upgraded files
(15 distinct programs)
(14 distinct packages)

Of these, 12 seem to contain init scripts which can be used to restart them:
The following packages seem to have init scripts that could be used to restart them:
gpm:
3044 /usr/sbin/gpm
rpcbind:
2208 /sbin/rpcbind
bind9:
8463 /usr/sbin/named
openssh-server:
22124 /usr/sbin/sshd
ntp:
4078 /usr/sbin/ntpd
tftpd-hpa:
3417 /usr/sbin/in.tftpd
uptimed:
2704 /usr/sbin/uptimed
cron:
3019 /usr/sbin/cron
postfix:
22145 /usr/lib/postfix/qmgr
8892 /usr/lib/postfix/master
hddtemp:
3174 /usr/sbin/hddtemp
autofs:
2792 /usr/sbin/automount
openbsd-inetd:
3254 /usr/sbin/inetd

These are the init scripts:
service gpm restart
service rpcbind restart
service bind9 restart
service ssh restart
service ntp restart
service tftpd-hpa restart
service uptimed restart
service cron restart
service postfix restart
service hddtemp restart
service autofs restart
service openbsd-inetd restart

These processes do not seem to have an associated init script to restart them:
isc-dhcp-client:
3775 /sbin/dhclient

Use checkrestart online using onworks.net services