From owner-freebsd-questions@FreeBSD.ORG Thu Apr 17 06:20:04 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B14FE106564A for ; Thu, 17 Apr 2008 06:20:04 +0000 (UTC) (envelope-from amsibamsi@gmail.com) Received: from fg-out-1718.google.com (fg-out-1718.google.com [72.14.220.158]) by mx1.freebsd.org (Postfix) with ESMTP id 393F78FC1C for ; Thu, 17 Apr 2008 06:20:04 +0000 (UTC) (envelope-from amsibamsi@gmail.com) Received: by fg-out-1718.google.com with SMTP id 16so2999101fgg.35 for ; Wed, 16 Apr 2008 23:20:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:from:to:in-reply-to:content-type:content-transfer-encoding:mime-version:subject:date:references:x-mailer; bh=V3/l8A5sCLLZmMhyldczmFa7xH4aVO9Z3t/4sdR9HPs=; b=EanF8fYVY4M3OJBw9tLWZZNMzHdUYqAT9FdJybCvTUp2cmzSNpF8D2540uHcHmUG8x2KmXoMV4cIRhoWVdnKbC1jWoUp3L/qQu2zDeWQ5FsbU7IBj4PumW5rKL6aekRYEweVKgcabRBM4Fr4GBfU9N1t/GCA0QK4Nokb1+X+VyI= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:from:to:in-reply-to:content-type:content-transfer-encoding:mime-version:subject:date:references:x-mailer; b=oXec+x5wgvMkYtlkMvyBGqfGW/soiOchoT3BZu2qaXxsgx3iS2Oz4G9xmhC6G8YLN8RPqNt/L1TRD2fChaMwO3HGUA7RkGYWSaZRItYLaELV3RtxRhN5HPXSlp5+uexhPqvHUa2X/aP7ike2NlTBQdpX+R+GapHD9sfpPvZvpZY= Received: by 10.86.76.16 with SMTP id y16mr1963433fga.23.1208413203214; Wed, 16 Apr 2008 23:20:03 -0700 (PDT) Received: from marvelman.marvels.xx ( [77.57.75.125]) by mx.google.com with ESMTPS id l19sm8517453fgb.0.2008.04.16.23.20.01 (version=SSLv3 cipher=OTHER); Wed, 16 Apr 2008 23:20:02 -0700 (PDT) Message-Id: <5333CCB7-19A1-4EA3-BAAE-7771DAF19A53@gmail.com> From: Anselm Strauss To: freebsd-questions@freebsd.org In-Reply-To: <44tzi36kgx.fsf@be-well.ilk.org> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v919.2) Date: Thu, 17 Apr 2008 08:20:00 +0200 References: <44tzi36kgx.fsf@be-well.ilk.org> X-Mailer: Apple Mail (2.919.2) Subject: Re: Tracking base system and kernel updates/vulnerabilities X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Apr 2008 06:20:04 -0000 On Apr 15, 2008, at 20:28 , Lowell Gilbert wrote: > Anselm Strauss writes: > >> is there a tool, like portaudit for the ports tree, to track updates >> and/or vulnerabilities for the base system and the kernel? What I'm >> looking for is a tool that will check my current installation against >> a specific checkout of the CVS source and kernel trees considering a >> specific CVS tag and inform me where my system is outdated and >> vulnerable. I don't know if this is even possible by just having the >> CVS trees ... >> >> For the kernel, is there something like a linear version number in >> the >> -STABLE branches? I noticed there's a pX in the kernel version for >> release kernels. How do I for example compare the currentness of two >> 7.0-STABLE kernels if I don't know from what source they were build? > > freebsd-update(8) Yep, that's exactly what I was looking for (must have overlooked it). Had some trouble until I noticed it will only work if the running kernel has a -RELEASE tag in it's uname, but now I also see how this works with the patch version. I have 2 small questions left: - Can I somehow determine the version of the base system without running uname on the kernel (I could have a release base system but run a stable kernel for example)? Sure, I could take the indirect way over freebsd-update again, but is there some sort of version information stored in the base system? - Is there some list of all possible components in the base system? So far I've seen src, kernel and world. Are there more? Thanks, Anselm