Re: portmaster best practices

2012-01-25 Thread Victor Sudakov
Volodymyr Kostyrko wrote: [dd] > > NO_BACKUP means don't create a temporary package when deleting > something. This is unsuitable for me as /usr/ports in my network is > distributed via NFS ro. I also share /usr/ports via NFS ro, but I have defined PACKAGES=/var/tmp/packages in portmaster.rc t

Re: portmaster best practices

2012-01-24 Thread Roland Smith
On Tue, Jan 24, 2012 at 03:49:05PM +0700, Victor Sudakov wrote: > > Generally I like to run 'portsnap fetch update' followed by 'portmaster -ai' > > (after reading /usr/ports/UPDATING) every week. This keeps the number of > > huge > > compilefests (like gettext updates :-() to a minimum. > > Has

Re: portmaster best practices

2012-01-24 Thread Volodymyr Kostyrko
Victor Sudakov wrote: If portaudit shows that some installed packages have vulnerabilities, what do you usually do? Greatly depend on where am I. All my systems are staying up-to-date whereas when I'm visiting someones system I prefer to update only required pieces of software. Anyway if you te

Re: portmaster best practices

2012-01-24 Thread Victor Sudakov
Roland Smith wrote: > > > > If portaudit shows that some installed packages have vulnerabilities, > > what do you usually do? > > It depends on the vulnerability and what the package does. I will de-install > it if I think that the vulnerability is critical for me and there is no > workaround. >

Re: portmaster best practices

2012-01-24 Thread Victor Sudakov
Volodymyr Kostyrko wrote: > > > > If portaudit shows that some installed packages have vulnerabilities, > > what do you usually do? > > Greatly depend on where am I. All my systems are staying up-to-date > whereas when I'm visiting someones system I prefer to update only > required pieces of sof

Re: portmaster best practices

2012-01-23 Thread Roland Smith
On Mon, Jan 23, 2012 at 05:32:33PM +0700, Victor Sudakov wrote: > Hello portmaster users, > > If portaudit shows that some installed packages have vulnerabilities, > what do you usually do? It depends on the vulnerability and what the package does. I will de-install it if I think that the vulnera

Re: portmaster best practices

2012-01-23 Thread ill...@gmail.com
On 23 January 2012 05:32, Victor Sudakov wrote: > Hello portmaster users, > > If portaudit shows that some installed packages have vulnerabilities, > what do you usually do? > > Do you upgrade only the vulnerable packages, or vulnerable packages > and dependent packages (portmaster -r), or perhaps

Re: portmaster best practices

2012-01-23 Thread Volodymyr Kostyrko
Victor Sudakov wrote: Hello portmaster users, If portaudit shows that some installed packages have vulnerabilities, what do you usually do? Greatly depend on where am I. All my systems are staying up-to-date whereas when I'm visiting someones system I prefer to update only required pieces of

portmaster best practices

2012-01-23 Thread Victor Sudakov
Hello portmaster users, If portaudit shows that some installed packages have vulnerabilities, what do you usually do? Do you upgrade only the vulnerable packages, or vulnerable packages and dependent packages (portmaster -r), or perhaps all packages (portmaster -a)? Or do you "pkg_delete -a" all