From owner-freebsd-security Wed Apr 11 11:34:40 2001 Delivered-To: freebsd-security@freebsd.org Received: from sj-msg-core-1.cisco.com (sj-msg-core-1.cisco.com [171.71.163.11]) by hub.freebsd.org (Postfix) with ESMTP id 4501C37B422 for ; Wed, 11 Apr 2001 11:34:35 -0700 (PDT) (envelope-from bmah@cisco.com) Received: from bmah-freebsd-0.cisco.com (bmah-freebsd-0.cisco.com [171.70.84.42]) by sj-msg-core-1.cisco.com (8.9.3/8.9.1) with ESMTP id LAA24287; Wed, 11 Apr 2001 11:34:32 -0700 (PDT) Received: (from bmah@localhost) by bmah-freebsd-0.cisco.com (8.11.3/8.11.1) id f3BIYS634015; Wed, 11 Apr 2001 11:34:28 -0700 (PDT) (envelope-from bmah) Message-Id: <200104111834.f3BIYS634015@bmah-freebsd-0.cisco.com> X-Mailer: exmh version 2.3.1 01/19/2001 with nmh-1.0.4 To: Jason DiCioccio Cc: "'Scott Johnson'" , freebsd-security@FreeBSD.ORG Subject: Re: Security Announcements In-Reply-To: <657B20E93E93D4118F9700D0B73CE3EA0166D77F@goofy.epylon.lan> References: <657B20E93E93D4118F9700D0B73CE3EA0166D77F@goofy.epylon.lan> Comments: In-reply-to Jason DiCioccio message dated "Wed, 11 Apr 2001 11:13:35 -0700." From: "Bruce A. Mah" Reply-To: bmah@FreeBSD.ORG X-Face: g~c`.{#4q0"(V*b#g[i~rXgm*w;:nMfz%_RZLma)UgGN&=j`5vXoU^@n5v4:OO)c["!w)nD/!!~e4Sj7LiT'6*wZ83454H""lb{CC%T37O!!'S$S&D}sem7I[A 2V%N&+ X-Image-Url: http://www.employees.org/~bmah/Images/bmah-cisco-small.gif X-Url: http://www.employees.org/~bmah/ Mime-Version: 1.0 Content-Type: multipart/signed; boundary="==_Exmh_878091516P"; micalg=pgp-sha1; protocol="application/pgp-signature" Content-Transfer-Encoding: 7bit Date: Wed, 11 Apr 2001 11:34:28 -0700 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org --==_Exmh_878091516P Content-Type: text/plain; charset=us-ascii If memory serves me right, Jason DiCioccio wrote: > While I don't take your approach to maintaining my machines (I > actually use -STABLE), I completely agree with you. I have > encountered problems in -STABLE due to the given period of time that > I simply cvsupped to it (getting -STABLE on a 'bad day').. Mind you, > - -CURRENT has many more bad days than -STABLE does, but -STABLE > definitely has them. And if every single machine on your network has > to be up at all times, I would agree with your patching -RELEASE > method. I'm sure many others take this path as well, and it seems a > logical one. It's nice to have a choice. Another choice is to not grab the latest 4-STABLE, but use a 4-STABLE from some time in the recent past that was reasonably bug-free. See the date= keyword to cvsup(8). Bruce. --==_Exmh_878091516P Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: Exmh version 2.2 06/23/2000 iD8DBQE61KO02MoxcVugUsMRAne1AKD/MhgQPua1vunGIpuNFAVgy9V4LwCg/Zdw ceAy5Ry3bUWxyk1RatZvsAc= =MyoP -----END PGP SIGNATURE----- --==_Exmh_878091516P-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message