chflags issue for jails upgrading from 13.2 to 14

[dvl@]

I hit a chflags issue upgrading FreeBSD 13.2 jails to FreeBSD 14.

It affected more than one jail. I'm not sure if this is a global issue or just me and this one host.

The files are:

• /usr/bin/opieinfo
• /usr/bin/opiepasswd
• /usr/lib/librt.so.1

See https://dan.langille.org/2023/12/03/freebsd-14-upgrade-files-not-removed-by-delete-old/

 

[Cath O'Deray]

I suspect, not you alone.

… I did see the notes about opie but didn't do anything as I got confused by the fact that certain jails were fine and others I was not able to access them.

Context, for drive-by readers: removal of OPIE is noted under <https://www.freebsd.org/releases/14.0R/relnotes/#userland-config>, another related commit is below.

Belatedly document OPIE removal in RELNOTES and UPDATING. · freebsd/freebsd-src@d2c839e

MFC after: 3 days Reviewed by: imp, emaste Differential Revision: https://reviews.freebsd.org/D41822

github.com

 

[Alain De Vos]

They should remove chflags. I find it an unnecessary annoyance.
- It does not increase security.
- It does not prevent doing stupid stuff as root.

 

[Cath O'Deray]

Re: chflags(7) in a hardening and security context, <https://forums.freebsd.org/posts/633105>.