NAME

syspatch — manage base system binary patches

SYNOPSIS

DESCRIPTION

syspatch is a utility to fetch, verify, install and revert OpenBSD binary patches.

When run without any options, syspatch will apply all missing patches, creating a rollback tarball containing the files it is about to replace, then extracting and installing all files contained in the syspatch tarball. If any sets are missing, patches are skipped accordingly. Patches are cumulative and as such it is not possible to install only a subset of them.

The options are as follows:

-c

List available patches; suitable for cron(8).

-l

List installed patches.

-R

Revert all patches.

-r

Revert the most recently installed patch.

FILES

/etc/installurl

OpenBSD mirror top-level URL for fetching patches.

/var/syspatch/*

Directories containing the rollback tarball and original signed diff(1) of installed patches.

EXIT STATUS

The syspatch utility exits 0 on success, and >0 if an error occurs. In particular, 2 indicates that applying patches was requested but no additional patch was installed.

SEE ALSO

signify(1), installurl(5), release(8)

HISTORY

syspatch first appeared in OpenBSD 6.1.

AUTHORS

syspatch was written by Antoine Jacoutot <ajacoutot@openbsd.org>.

CAVEATS

syspatch is designed to work solely on official OpenBSD releases.