From owner-freebsd-questions@FreeBSD.ORG Sat Feb 10 23:06:41 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 42E6A16A402 for ; Sat, 10 Feb 2007 23:06:41 +0000 (UTC) (envelope-from erikt@midgard.homeip.net) Received: from ch-smtp01.sth.basefarm.net (ch-smtp01.sth.basefarm.net [80.76.149.212]) by mx1.freebsd.org (Postfix) with ESMTP id 03BD713C442 for ; Sat, 10 Feb 2007 23:06:40 +0000 (UTC) (envelope-from erikt@midgard.homeip.net) Received: from c83-253-10-135.bredband.comhem.se ([83.253.10.135]:49410 helo=falcon.midgard.homeip.net) by ch-smtp01.sth.basefarm.net with smtp (Exim 4.63) (envelope-from ) id 1HG1Il-0007Bf-5M for freebsd-questions@freebsd.org; Sun, 11 Feb 2007 00:06:40 +0100 Received: (qmail 5980 invoked by uid 1001); 11 Feb 2007 00:06:36 +0100 Date: Sun, 11 Feb 2007 00:06:36 +0100 From: Erik Trulsson To: Michael Message-ID: <20070210230636.GA5968@falcon.midgard.homeip.net> Mail-Followup-To: Michael , FreeBSD - Questions References: <45CE41ED.3050900@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <45CE41ED.3050900@gmail.com> User-Agent: Mutt/1.5.13 (2006-08-11) X-Scan-Result: No virus found in message 1HG1Il-0007Bf-5M. X-Scan-Signature: ch-smtp01.sth.basefarm.net 1HG1Il-0007Bf-5M c535286fa9bb4f930d22847aa24d8e21 Cc: FreeBSD - Questions Subject: Re: cvsup tag for ports X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Feb 2007 23:06:41 -0000 On Sat, Feb 10, 2007 at 02:06:37PM -0800, Michael wrote: > Hello everyone, > > I'm building a production server and I have what may seem to be a very > simple question so I hope it only requires a simple answer. > > As I've studied the FreeBSD Handbook as well as the man pages for this, > it's still not clear to me which tag I should use for a production server. > > For my sources I always use the security branch for the release we are > using so that they stay stable and also plug most of the security issues > as they arise and so the sources tag is always RELENG_6_2. > > For the ports, the default tag is always tag=. which I'm not sure is the > best thing for a production server since that's the tab for -CURRENT. > On one hand it makes sense to track that branch for ports because that's > where fixes would go for applications as they find them, but I'm not > convinced this is the best thing for a production server and wonder if I > should also use the security branch for the ports. > > My first question is, does any real security fixes go into the ports > when you pull from a security branch? In other words, do maintainers > actually submit fixes to that branch for the ports? > > I have a similiar question for the docs as well, should we be tracking > only the security branch when using cvsup for sources, ports and doc's? Neither the ports tree nor the docs tree is branched. I.e. there is no security branch for ports. On the other hand you are not required to update installed ports/packages just because you update the ports tree. -- Erik Trulsson ertr1013@student.uu.se