From owner-freebsd-questions@FreeBSD.ORG Mon Mar 8 12:45:10 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B0A0116A4CE for ; Mon, 8 Mar 2004 12:45:10 -0800 (PST) Received: from smtp01.mrf.mail.rcn.net (smtp01.mrf.mail.rcn.net [207.172.4.60]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7BAA743D31 for ; Mon, 8 Mar 2004 12:45:10 -0800 (PST) (envelope-from gerard-seibert@rcn.com) Received: from 207-237-110-41.c3-0.crm-ubr4.crm.ny.cable.rcn.com ([207.237.110.41] helo=[127.0.0.1]) by smtp01.mrf.mail.rcn.net with esmtp (Exim 3.35 #4) id 1B0Rca-00046B-00; Mon, 08 Mar 2004 15:45:08 -0500 Date: Mon, 08 Mar 2004 15:45:10 -0500 From: Gerard Seibert To: freebsd-questions@freebsd.org Sender: Gerard@FreeBSD.ORG, Seibert@FreeBSD.ORG In-Reply-To: <20040308185624.05BCA16A4F7@hub.freebsd.org> References: <20040308185624.05BCA16A4F7@hub.freebsd.org> Organization: Poor Message-Id: <20040308154504.1B5F.GERARD-SEIBERT@rcn.com> MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit X-Mailer: Becky! ver. 2.08.01 [en] cc: bsilver@chrononomicon.com Subject: Re: Update Utility X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: gerard-seibert@rcn.com List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Mar 2004 20:45:10 -0000 On Monday, March 08, 2004 1:56:24 PM bsilver@chrononomicon.com wrote: |>Date: Mon, 8 Mar 2004 12:22:09 -0500 |>From: Bart Silverstrim |>Subject: Re: Update utility |>To: "Ioannis Vranos" |>Cc: FreeBSD Questions Mailing List |>Message-ID: <2121A5DA-7125-11D8-B6F7-000A956D2452@chrononomicon.com> |>Content-Type: text/plain; charset=US-ASCII; format=flowed |> |> |>On Mar 8, 2004, at 12:15 PM, Ioannis Vranos wrote: |> |>> Is there any utility in FreeBSD 4.9 to check for possible updates/bug |>> fixes |>> via internet? |>> |> |>I *think* have have kind of a handle on this on the server I just |>installed... |> |>I usually do a cvsup to update the list of the ports tree, then use a |>procedure I picked out of http://www.freebsddiary.org/portupgrade.php |>to update applications with portupgrade. |> |>If anyone else has a method other than this, I'd love to know the |>procedure :-) |> |>This only updates ports. Updating FreeBSD, I don't know of anything |>other than if you find a security advisory, you have to have the src |>tree and patch that portion and recompile whatever had the |>vulnerability, following the advisory instructions. I'm thinking that |>since most daemons/applications are from ports, keeping your ports tree |>updated should limit most remote exploits...I would be interested in |>knowing of a way to check whether the installation of the OS is up to |>date, though. ********** Reply Separator ********** Monday, March 08, 2004 3:24:31 PM I use what many might consider a rather contorted mix of programs to update my system. First, I log in as root. I could use 'sudo' but I have found that at times portupgrade does not work correctly with it. Even when I add the '-s' switch. In any case, I run them in the following order as specified. 1) cvsup 2) pkgdb -aFfuv 3) portsdb -Uu 4) portupgrade -aDDPrRvy 5) periodic weekly I am not sure if this is the absolute correct way to do things; however, so far I have not experienced any problems doing it this way. You could skip step five if your system is on 24/7 or at least when the cron job is scheduled to run. You might want to throw a 'portsclean -CDDLPP' into the mix also prior to step five. I am sure that others will have far better suggestions. Gerard Seibert gerard-seibert@rcn.com