Date: Thu, 18 Apr 2002 18:10:30 -0400 From: "Jeff Palmer" <scorpio@drkshdw.org> To: <freebsd-security@freebsd.org> Subject: Re: FreeBSD Security Advisory FreeBSD-SA-02:21.tcpip Message-ID: <012901c1e725$da237e90$0286a8c0@jeffrey> References: <4.3.2.7.2.20020417230144.032ad390@nospam.lariat.org> <200204171923.g3HJNga58899@freefall.freebsd.org> <4.3.2.7.2.20020418095356.024354c0@nospam.lariat.org>
next in thread | previous in thread | raw e-mail | index | archive | help
It's not the FreeBSD communities fault if you don't have a non-critical machine to test a cvsup, before going "live" in a production environment. Most respectable companies with mission critical servers would do so. It's also not our fault if cvsup is "not an acceptable solution" in your curcumstances. It works for the rest of the world. Get off your high horse, and mock up a server, cvsup test it, and then upgrade your production servers. If this is still unacceptable, Please feel free to code up your own patches, apply them, and quit bitching on the mailing lists? Jeff ----- Original Message ----- From: "Brett Glass" <brett@lariat.org> To: "Christopher Schulte" <schulte+freebsd@nospam.schulte.org>; <security@FreeBSD.ORG> Sent: Thursday, April 18, 2002 12:10 PM Subject: Re: FreeBSD Security Advisory FreeBSD-SA-02:21.tcpip > At 11:11 PM 4/17/2002, Christopher Schulte wrote: > > >You can synchronize your source tree and recompile. See: > > > >http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/synching.html > > Alas, this is not an acceptable solution. > > I realize that many people use FreeBSD on non-mission-critical systems, or > to tinker with, and can afford downtime. But we need to create and maintain > production machines. > > I hope that you can understand that doing a CVSup and then rebuilding the > world every night (slowing the system to a crawl in the process and > creating a system which might or might not be 100% stable) is not an > acceptable solution. Nor is downloading a random snapshot. (Which one > can't seem to do anyway these days; releng4.freebsd.org is refusing > > What is needed is a known good "p3" (or "p-whatever") build that can be > installed quickly with minimum downtime. Yet, despite the fact that > people routinely refer to (for example) "4.5-RELEASE-p3", no such build > seems to actually exist. For those of us who create and manage production > servers, there should be. > > --Brett Glass > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?012901c1e725$da237e90$0286a8c0>