is it safe to apply this Dirty COW fix on Retropie?

detron

while reading this article I ran across the recently released fix for the Dirty COW vulnerability

sudo apt-get update
sudo apt-get install raspberrypi-kernel

is this safe to run on a Retropie build without any harm?
or is there plans to add this as part of the Retropie update?

thank you either way

backstander

You might want to run this instead:
sudo apt-get update && sudo apt-get dist-upgrade

In the past running this update I did have an issue with my Xbox 360 buttons changing after that upgrade but to fix it I just went into the RetroPie Setup Script and ran the Update All Installed Packages.

detron

@backstander

are you saying the Dirty COW fix is already integrated into the standard upgrades?

this vulnerability was just released.

backstander

I'm not sure if the raspberrypi-kernel has been updated with the Dirty COW fix in Raspbian yet (which is what RetroPie is built on) but running dist-upgrade should include the raspberrypi-kernel update if it is present.

obsidianspider

Wouldn't going into Retropie Setup and updating all installed packages including underlying OS stuff also apply this fix?

meleu

@detron just for curiosity: is your raspberry pi accessible from the internet? Do you use it only for gaming?
Maybe there's no need to be so paranoid. :-)

obsidianspider

I don't know if it applied the fix or not, but now I get to re-patch my kernel with the Raphnet fix.

backstander

@obsidianspider I could be wrong but I think the running the Update All Installed Packages does a sudo apt-get update && sudo apt-get upgrade so it installs the newest versions of all packages currently installed which would probably work but to make sure you're getting the newest kernel, you'd want to do the "dist-upgrade". I know that the update in Raspi-Config is just an "upgrade" (not "dist-upgrade") but I believe there is an option in the RetroPie Setup Script under "Configuration / tools" then in "Raspbian related tools" you can do an update that does the "dist-upgrade".

If I'm wrong about this, someone please post the correct information :-)

BuZz

Update All Installed Packages asks if you want to update the underlying OS packages, so it can be done if choosing yes.

it does a dist-upgrade btw

detron

@meleu

not accessible via internet, but I am a network security specialist, who loves Linux, all my desktops, and laptops have been patched, I was just trying to ensure complete coverage in my house.

thanks,