From owner-freebsd-questions@FreeBSD.ORG Mon Jul 12 19:31:08 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E3119106564A for ; Mon, 12 Jul 2010 19:31:08 +0000 (UTC) (envelope-from mlmichael70@gmail.com) Received: from mail-bw0-f54.google.com (mail-bw0-f54.google.com [209.85.214.54]) by mx1.freebsd.org (Postfix) with ESMTP id 69CCF8FC12 for ; Mon, 12 Jul 2010 19:31:08 +0000 (UTC) Received: by bwz12 with SMTP id 12so3122069bwz.13 for ; Mon, 12 Jul 2010 12:31:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from :user-agent:mime-version:to:cc:subject:references:in-reply-to :content-type:content-transfer-encoding; bh=eoMbPqh8XbQgtPadtnnlsfciWId0GMnVZ5ZUBlJFo0g=; b=ohgEe6y5GQatHX5L8z5nBz2Vv35qMrBgg5J6UG7xV/SpZ38jD0dLUq4wYylv5UpG1t 7xhqgVQ0WcNRf2CLBeF2RpV6CiZhafTgep28Q9HgnUr3fmq6U6hxnEQFnNWeh4qFTM8c l/b/ADg+hwFGpoGq2Ym1YhirjuhF2WaPmSOwk= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; b=HxcgXFGbmliuxAcf2HQhS/P2WKdGgqVMwlM4Ga96nMrdRxrk5ppSm17ymy1kzgKOvT oDXUU1dPOjuuk9OcdBRyx4nAhnfhs9nezpWy+ubzRmThmzvwjErEyVVXSXjJKnjCzMu9 nQV+DB6NqoMCXlb+kkP4DFWvVFRZU2Uuo1yO8= Received: by 10.204.8.198 with SMTP id i6mr2953642bki.66.1278963066362; Mon, 12 Jul 2010 12:31:06 -0700 (PDT) Received: from prime.local (94-193-57-116.zone7.bethere.co.uk [94.193.57.116]) by mx.google.com with ESMTPS id g11sm19865329bkw.22.2010.07.12.12.31.05 (version=SSLv3 cipher=RC4-MD5); Mon, 12 Jul 2010 12:31:05 -0700 (PDT) Message-ID: <4C3B6D7A.90603@gmail.com> Date: Mon, 12 Jul 2010 20:31:06 +0100 From: Michael User-Agent: Mozilla/5.0 (X11; U; FreeBSD amd64; en-US; rv:1.9.1.10) Gecko/20100628 Thunderbird/3.0.5 MIME-Version: 1.0 To: Mike Clarke References: <201007022258.29863.jmc-freebsd2@milibyte.co.uk> In-Reply-To: <201007022258.29863.jmc-freebsd2@milibyte.co.uk> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org Subject: Re: Staying up to date with security patches X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Jul 2010 19:31:09 -0000 On 02/07/2010 22:58, Mike Clarke wrote: > On Friday 02 July 2010, Ed Flecko wrote: > >> Since I will be doing a custom kernel at some point, I won't use >> freebsd-update, I'm using cvsup instead. > > The alternative would be to just use the source code patches from the > security-advisories mailing list. That way you don't have to rebuild > the whole base system each time, though some of the patches will > require the kernel to be rebuilt. > That's what I used to do and it works. Only trouble is that in some cases it turns out that it's not enough to simply follow instructions from security advisory. You have to manually make other parts of the system otherwise updating will fail. I found it somewhat confusing and time consuming. Now I'm using freebsd-update with my custom built kernel and it also works fine. I just have to remember to rebuild and reinstall my kernel every time after using freebsd-update (or in fact only when kernel code is affected). That way I got very quick and no-brainer system updates. Is it not advised to do it this way? Michael