From owner-freebsd-questions@FreeBSD.ORG Thu May 7 04:58:21 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9FFCC1065672 for ; Thu, 7 May 2009 04:58:21 +0000 (UTC) (envelope-from mel.flynn+fbsd.questions@mailing.thruhere.net) Received: from mailhub.rachie.is-a-geek.net (rachie.is-a-geek.net [66.230.99.27]) by mx1.freebsd.org (Postfix) with ESMTP id 6E9678FC1E for ; Thu, 7 May 2009 04:58:21 +0000 (UTC) (envelope-from mel.flynn+fbsd.questions@mailing.thruhere.net) Received: from sarevok.dnr.servegame.org (mailhub.rachie.is-a-geek.net [192.168.2.11]) by mailhub.rachie.is-a-geek.net (Postfix) with ESMTP id 0245B7E837; Wed, 6 May 2009 20:58:19 -0800 (AKDT) From: Mel Flynn To: freebsd-questions@freebsd.org Date: Thu, 7 May 2009 06:58:18 +0200 User-Agent: KMail/1.11.2 (FreeBSD/8.0-CURRENT; KDE/4.2.2; i386; ; ) References: <8250ac3f0905061743l21a9a87fv9ca3aa50cb176873@mail.gmail.com> In-Reply-To: MIME-Version: 1.0 Content-Type: Text/Plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200905070658.18661.mel.flynn+fbsd.questions@mailing.thruhere.net> Cc: Tim Judd , Kalle =?iso-8859-1?q?M=F8ller?= Subject: Re: Maintaining a FreeBSD system - Workcycle X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 May 2009 04:58:21 -0000 On Thursday 07 May 2009 05:48:10 Tim Judd wrote: > 2) Install portaudit and watch the periodic mailings that are sent to you. > They list vulnerabilities in ports that really should be addressed. Not really. You can use the same common sense as with the base system and even more so (for the base system I just install them always, as it doesn't pay off in the long run to skip them). Portaudit for a (web)server has a lot of notifications that "are not critical", like several issues over the last year with php's safe mode that any sane webserver admin doesn't use. -- Mel