From owner-freebsd-questions@FreeBSD.ORG Thu Feb 9 01:42:45 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 45C0416A420 for ; Thu, 9 Feb 2006 01:42:45 +0000 (GMT) (envelope-from chris@monochrome.org) Received: from mail.monochrome.org (b4.ebbed1.client.atlantech.net [209.190.235.180]) by mx1.FreeBSD.org (Postfix) with ESMTP id 62F5F43D5A for ; Thu, 9 Feb 2006 01:42:38 +0000 (GMT) (envelope-from chris@monochrome.org) Received: from tripel (tripel [192.168.1.11]) by mail.monochrome.org (8.9.3/8.9.3) with ESMTP id UAA51015; Wed, 8 Feb 2006 20:42:30 -0500 (EST) (envelope-from chris@monochrome.org) Date: Wed, 8 Feb 2006 20:43:21 -0500 (EST) From: Chris Hill To: Chris Maness In-Reply-To: <43EA9782.7060708@chrismaness.com> Message-ID: <20060208203027.H73762@tripel.monochrome.org> References: <43EA9782.7060708@chrismaness.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: freebsd-questions@freebsd.org Subject: Re: Tracking Security in Ports and Base System X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Feb 2006 01:42:45 -0000 On Wed, 8 Feb 2006, Chris Maness wrote: > How should I set up cvsup to just track security updates for ports. > And would the best thing to do after I synced CVS, do portupgrade -a > so that everything selected gets rebuilt. I'm not sure there is a way to do this for ports, other than manually checking what's been changed and whether you consider that to be a security upgrade, then upgrading each applicable port by hand. As far as I understand, there is only one tag for ports ("tag=."), which gets you the "current" ports tree. I *can* guarantee that others know more about this than I do. > What is the equivalent for the base system? Much simpler: just track RELENG_your_release to get security updates and bug fixes and nothing else. For example, mine is RELENG_5_4 and therefore tracks 5.4-RELEASE. HTH. -- Chris Hill chris@monochrome.org ** [ Busy Expunging <|> ]