From owner-freebsd-questions@FreeBSD.ORG Fri Sep 3 15:44:13 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E48B116A4CE for ; Fri, 3 Sep 2004 15:44:12 +0000 (GMT) Received: from pd2mo2so.prod.shaw.ca (shawidc-mo1.cg.shawcable.net [24.71.223.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id BA39F43D48 for ; Fri, 3 Sep 2004 15:44:12 +0000 (GMT) (envelope-from andrews@shaw.ca) Received: from pd3mr8so.prod.shaw.ca (pd3mr8so-qfe3.prod.shaw.ca [10.0.141.24])2004))freebsd-questions@FreeBSD.org; Fri, 03 Sep 2004 08:27:50 -0600 (MDT) Received: from pn2ml3so.prod.shaw.ca ([10.0.121.147]) by pd3mr8so.prod.shaw.ca (Sun ONE Messaging Server 6.0 HotFix 1.01 (built Mar 15 2004)) with ESMTP id <0I3G00BP6YUEVXE0@pd3mr8so.prod.shaw.ca> for freebsd-questions@FreeBSD.org; Fri, 03 Sep 2004 08:27:50 -0600 (MDT) Received: from [192.168.18.21] (S0106000d88901aab.ed.shawcable.net [68.148.128.160]) by l-daemon (iPlanet Messaging Server 5.2 HotFix 1.18 (built Jul 28 2003)) with ESMTP id <0I3G00B54YUEEN@l-daemon> for freebsd-questions@FreeBSD.org; Fri, 03 Sep 2004 08:27:50 -0600 (MDT) Date: Fri, 03 Sep 2004 08:27:48 -0600 From: Paul Andrews In-reply-to: <20040903072118.GA7882@happy-idiot-talk.infracaninophile.co.uk> To: freebsd-questions@FreeBSD.org Message-id: <41387F64.40103@shaw.ca> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=us-ascii Content-transfer-encoding: 7bit X-Accept-Language: en-us, en References: <4137F568.2010306@shaw.ca> <20040903072118.GA7882@happy-idiot-talk.infracaninophile.co.uk> User-Agent: Mozilla Thunderbird 0.7.3 (Windows/20040803) Subject: Re: Errata Branch X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Sep 2004 15:44:13 -0000 Matthew, Thanks for the information. You might have already answered this but I'm not 100% sure, once I have cvsup RELENG_4_10 do I need to buildworld just to get the errata branch installed or can I just do as: make buildkernel KERNCONF=GENERIC make installkernel KERNCONF=GENERIC or is it better to do make buildworld make buildkernel KERNCONF=GENERIC make installkernel KERNCONF=GENERIC reboot (signal user) mergemaster -p make installworld mergemaster reboot Also is it necessary to do the mergemater part of the buildworld process. Thanks again for the assistance. Paul Matthew Seaman wrote: > On Thu, Sep 02, 2004 at 10:39:04PM -0600, Paul Andrews wrote: > > >>I'm looking for some information on the Errata Branch for 4.10. I just >>re-installed my FreeBSD system and am now running 4.10-RELEASE. I want >>to make sure that I am running with the most-up-to-date security patches >>applied. > > > Yes. All you need to do is cvsup to the head of the RELENG_4_10 > branch, and compile and install using that code. > > >>I would like to know the steps necessary for appling the changes in >>RELENG_4_10. Also how can I tell if the security patchs and code fixes >>have been applied. > > > Just using cvsup will get you all of the security and other fixes. > That includes all of the patches included in the various security > advisories issued by the FreeBSD project. > > To get a newly installed system up to the latest patch level, using > cvsup and doing a complete buildworld cycle is your best bet. For any > further Errata or Security Advisories, you can always do another > buildworld cycle, or there will usually be instructions in the > advisory on how to just recompile only the affected bits. > > If you go the whole 'buildworld' route each time, the uname(1) output > will show the patchlevel of the system: currently that's > 4.10-RELEASE-p2 after the release of FreeBSD-SA-04:13 on June 30th. > > Instructions on how to do a buildworld can be found in: > > http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html > > and also be sure to read /usr/src/UPDATING after cvsup'ing to see if > there are any special instructions. > > >>My stable-subfile: >>*default host=cvsup12.freebsd.org >>*default base=/usr >>*default prefix=/usr >>*default release=cvs tag=RELENG_4_10 >>*default delete use-rel-suffix >>src-all > > > That looks fine to me. > > Cheers, > > Matthew >