From owner-freebsd-security Tue Nov 20 8:11:13 2001 Delivered-To: freebsd-security@freebsd.org Received: from mercury.ccmr.cornell.edu (mercury.ccmr.cornell.edu [128.84.231.97]) by hub.freebsd.org (Postfix) with ESMTP id CBB3F37B405 for ; Tue, 20 Nov 2001 08:11:10 -0800 (PST) Received: from ruby.ccmr.cornell.edu (IDENT:0@ruby.ccmr.cornell.edu [128.84.231.115]) by mercury.ccmr.cornell.edu (8.9.3/8.9.3) with ESMTP id LAA04138; Tue, 20 Nov 2001 11:12:15 -0500 Received: from localhost (mitch@localhost) by ruby.ccmr.cornell.edu (8.9.3/8.9.3) with ESMTP id LAA03241; Tue, 20 Nov 2001 11:11:10 -0500 X-Authentication-Warning: ruby.ccmr.cornell.edu: mitch owned process doing -bs Date: Tue, 20 Nov 2001 11:11:10 -0500 (EST) From: Mitch Collinsworth X-Sender: mitch@ruby.ccmr.cornell.edu To: Carroll Kong Cc: Mike Tancsa , security@FreeBSD.ORG Subject: Re: Fwd: Vendors For WU-FTPD Please Read In-Reply-To: <5.1.0.14.2.20011120104126.02698ec0@netmail.home.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Tue, 20 Nov 2001, Carroll Kong wrote: > Finally, I agree with Mike. When you start managing more and more boxes, > it becomes a serious pain in the butt. You have to worry so much more > (which is part of the job, but still), about sendmail or bind or wu-ftpd > blowing up. It is nicer if you can get something that has a few less bugs > to minimize this. Agreed, a few less is always better than a few more. But applying security updates is part of our job as sysadmins. If you have lots of boxen to look after, you need to automate the update process. There are various approaches to this. I like cfengine. We're now experimenting with PXE and auto reinstalls. There are other good approaches besides these. -Mitch To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message