Re: Tracking Security in Ports and Base System

2006-03-02 Thread Chris Hill
On Wed, 1 Mar 2006, [EMAIL PROTECTED] wrote: [snip] Is my supfile correct to track security for freebsd-6.0? [snip] *default release=cvs tag=RELENG_6 [snip] As I understand it, that tag will get you the latest released version of 6.x. So today it would apply security and bugfix updates

Re: Tracking Security in Ports and Base System

2006-03-02 Thread Donald J. O'Neill
On Thursday 02 March 2006 13:59, Chris Hill wrote: On Wed, 1 Mar 2006, [EMAIL PROTECTED] wrote: [snip] Is my supfile correct to track security for freebsd-6.0? [snip] *default release=cvs tag=RELENG_6 [snip] As I understand it, that tag will get you the latest released version of

Re: Tracking Security in Ports and Base System

2006-03-02 Thread Chris Hill
On Thu, 2 Mar 2006, Donald J. O'Neill wrote: On Thursday 02 March 2006 13:59, Chris Hill wrote: [some erroneous drivel] This is not quite correct. tag=RELENG_6 will give you the src for 6-STABLE, which is to say FreeBSD 6.1 PRELEASE, or maybe its RELEASECANDIDATE now. tag=RELENG_6_0 will

Re: Tracking Security in Ports and Base System

2006-03-02 Thread Donald J. O'Neill
On Thursday 02 March 2006 16:23, Chris Hill wrote: Sorry for the misinformation! You are right, RELENG_6 is equivalent to -STABLE. I sit corrected. -- Chris Hill [EMAIL PROTECTED] ** [ Busy Expunging | ] That's ok Chris. I knew you really knew what you

Re: Tracking Security in Ports and Base System

2006-03-02 Thread Chris Maness
Chris Hill wrote: On Wed, 1 Mar 2006, [EMAIL PROTECTED] wrote: [snip] Is my supfile correct to track security for freebsd-6.0? [snip] *default release=cvs tag=RELENG_6 [snip] As I understand it, that tag will get you the latest released version of 6.x. So today it would apply security

Re: Tracking Security in Ports and Base System

2006-03-02 Thread Chris Maness
Donald J. O'Neill wrote: On Thursday 02 March 2006 13:59, Chris Hill wrote: On Wed, 1 Mar 2006, [EMAIL PROTECTED] wrote: [snip] Is my supfile correct to track security for freebsd-6.0? [snip] *default release=cvs tag=RELENG_6 [snip] As I understand it, that

Re: Tracking Security in Ports and Base System

2006-03-01 Thread chris
On Wed, 8 Feb 2006, Chris Maness wrote: How should I set up cvsup to just track security updates for ports. And would the best thing to do after I synced CVS, do portupgrade -a so that everything selected gets rebuilt. I'm not sure there is a way to do this for ports, other than manually

Re: Tracking Security in Ports and Base System

2006-03-01 Thread Randy Pratt
On Wed, 1 Mar 2006 10:09:51 -0800 (PST) [EMAIL PROTECTED] wrote: On Wed, 8 Feb 2006, Chris Maness wrote: How should I set up cvsup to just track security updates for ports. And would the best thing to do after I synced CVS, do portupgrade -a so that everything selected gets rebuilt.

Re: Tracking Security in Ports and Base System

2006-03-01 Thread Chris Maness
On Wed, 1 Mar 2006, Randy Pratt wrote: On Wed, 1 Mar 2006 10:09:51 -0800 (PST) [EMAIL PROTECTED] wrote: On Wed, 8 Feb 2006, Chris Maness wrote: How should I set up cvsup to just track security updates for ports. And would the best thing to do after I synced CVS, do portupgrade -a so that

Re: Tracking Security in Ports and Base System

2006-03-01 Thread Randy Pratt
On Wed, 1 Mar 2006 14:31:55 -0800 (PST) Chris Maness [EMAIL PROTECTED] wrote: On Wed, 1 Mar 2006, Randy Pratt wrote: On Wed, 1 Mar 2006 10:09:51 -0800 (PST) [EMAIL PROTECTED] wrote: On Wed, 8 Feb 2006, Chris Maness wrote: How should I set up cvsup to just track security updates

Re: Tracking Security in Ports and Base System

2006-03-01 Thread Randy Pratt
As an addendum: I forgot to mention that its a good idea when updating sources or ports to wrap the process in script so that you have a log of what was actually done. script /path/to/someplace_with_space/scriptname Then run the commands for the process involved. When you are finished

Re: Tracking Security in Ports and Base System

2006-03-01 Thread Donald J. O'Neill
On Wednesday 01 March 2006 16:31, Chris Maness wrote: Thanks, I do have port audit installed. I was refering to system security. The base system + FreeBSD userland. I wanted to do this because I did get a notice from the security list today. Do I do a make buildworld, to update the

Re: Tracking Security in Ports and Base System

2006-03-01 Thread Chris Maness
Randy Pratt wrote: On Wed, 1 Mar 2006 14:31:55 -0800 (PST) Chris Maness [EMAIL PROTECTED] wrote: On Wed, 1 Mar 2006, Randy Pratt wrote: On Wed, 1 Mar 2006 10:09:51 -0800 (PST) [EMAIL PROTECTED] wrote: On Wed, 8 Feb 2006, Chris Maness wrote: How should I set up

Re: Tracking Security in Ports and Base System

2006-02-10 Thread Matthew Seaman
Andreas Davour wrote: Which makes me finally throw out a question I've been wondering about. Is there no way of getting a specific tagged ports tree, if you'd like to get a ports tree the way it looked when, say, 4.6-RELEASE came out? Sure you can. Just edit your ports supfile to have:

Re: Tracking Security in Ports and Base System

2006-02-10 Thread Dan Nelson
In the last episode (Feb 10), Andreas Davour said: On Wed, 8 Feb 2006, Chuck Swiger wrote: Chris Maness wrote: How should I set up cvsup to just track security updates for ports. And would the best thing to do after I synced CVS, do portupgrade -a so that everything selected gets rebuilt.

Tracking Security in Ports and Base System

2006-02-08 Thread Chris Maness
Newbie question: How should I set up cvsup to just track security updates for ports. And would the best thing to do after I synced CVS, do portupgrade -a so that everything selected gets rebuilt. What is the equivalent for the base system? ___

Re: Tracking Security in Ports and Base System

2006-02-08 Thread Chuck Swiger
Chris Maness wrote: How should I set up cvsup to just track security updates for ports. And would the best thing to do after I synced CVS, do portupgrade -a so that everything selected gets rebuilt. What is the equivalent for the base system? The ports tree isn't branched; just get HEAD

Re: Tracking Security in Ports and Base System

2006-02-08 Thread Kris Kennaway
On Wed, Feb 08, 2006 at 05:14:42PM -0800, Chris Maness wrote: Newbie question: How should I set up cvsup to just track security updates for ports. You can't, but you can track the entire thing and use portaudit to identify ports in need of security upgrade. Kris pgpi5jSueovO1.pgp

Re: Tracking Security in Ports and Base System

2006-02-08 Thread Chris Hill
On Wed, 8 Feb 2006, Chris Maness wrote: How should I set up cvsup to just track security updates for ports. And would the best thing to do after I synced CVS, do portupgrade -a so that everything selected gets rebuilt. I'm not sure there is a way to do this for ports, other than manually

Re: Tracking Security in Ports and Base System

2006-02-08 Thread Chris Maness
Kris Kennaway wrote: On Wed, Feb 08, 2006 at 05:14:42PM -0800, Chris Maness wrote: Newbie question: How should I set up cvsup to just track security updates for ports. You can't, but you can track the entire thing and use portaudit to identify ports in need of security upgrade.

Re: Tracking Security in Ports and Base System

2006-02-08 Thread Chris Maness
Much simpler: just track RELENG_your_release to get security updates and bug fixes and nothing else. For example, mine is RELENG_5_4 and therefore tracks 5.4-RELEASE. Is there a way to rebuild just the packages updated? Or does the whole tree have to be rebuilt?

Re: Tracking Security in Ports and Base System

2006-02-08 Thread Chris Hill
On Wed, 8 Feb 2006, Chris Maness wrote: Much simpler: just track RELENG_your_release to get security updates and bug fixes and nothing else. For example, mine is RELENG_5_4 and therefore tracks 5.4-RELEASE. Is there a way to rebuild just the packages updated? Or does the whole tree have to

Re: Tracking Security in Ports and Base System

2006-02-08 Thread Chris Maness
Chris Hill wrote: On Wed, 8 Feb 2006, Chris Maness wrote: Much simpler: just track RELENG_your_release to get security updates and bug fixes and nothing else. For example, mine is RELENG_5_4 and therefore tracks 5.4-RELEASE. Is there a way to rebuild just the packages updated? Or does the

Re: Tracking Security in Ports and Base System

2006-02-08 Thread Robert Huff
Chris Maness writes: I rebuilt all of the ports I had installed and it took almost two days. I have 560+ installed; I feel your pain. Actually, no I don't. Use portaudit/portversion to identify those that need updating, and do some each morning. Unless you hit one of the

Re: Tracking Security in Ports and Base System

2006-02-08 Thread Paul Schmehl
--On February 8, 2006 5:14:42 PM -0800 Chris Maness [EMAIL PROTECTED] wrote: Newbie question: How should I set up cvsup to just track security updates for ports. Install security/portaudit. You'll be notified daily regarding any ports that need security updates. And would the best