From owner-freebsd-security@FreeBSD.ORG Wed Oct 12 16:26:45 2005 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2B78616A420 for ; Wed, 12 Oct 2005 16:26:45 +0000 (GMT) (envelope-from piechota@argolis.org) Received: from gigatrex.com (saraswati.gigatrex.com [64.5.48.159]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5BF4E43D48 for ; Wed, 12 Oct 2005 16:26:43 +0000 (GMT) (envelope-from piechota@argolis.org) Received: (qmail 13555 invoked from network); 12 Oct 2005 16:26:28 -0000 Received: from unknown (HELO webmail.gigatrex.com) (127.0.0.1) by 127.0.0.1 with SMTP; 12 Oct 2005 16:26:28 -0000 Received: from proxy3b.external.lmco.com ([192.35.35.35]) (SquirrelMail authenticated user piechota@argolis.org) by webmail.gigatrex.com with HTTP; Wed, 12 Oct 2005 12:26:28 -0400 (EDT) Message-ID: <41508.192.35.35.35.1129134388.squirrel@webmail.gigatrex.com> In-Reply-To: <20051012082159.GA54387@kierun.org> References: <200510111202.j9BC2obf081876@freefall.freebsd.org> <1129036481.434bbac1720a6@webmail.boxke.be> <434BBF09.6040101@htnet.hr> <434CBDC2.4070405@open-networks.net> <20051012082159.GA54387@kierun.org> Date: Wed, 12 Oct 2005 12:26:28 -0400 (EDT) From: "Matt Piechota" To: "Yann Golanski" User-Agent: SquirrelMail/1.4.5 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-XheaderVersion: 1.1 X-UserAgent: Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:1.7) Gecko/20050816 Cc: Timothy Smith , freebsd-security@freebsd.org Subject: Re: FreeBSD Security Advisory FreeBSD-SA-05:21.openssl X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Oct 2005 16:26:45 -0000 On Wed, October 12, 2005 4:21 am, Yann Golanski wrote: > Quoth Timothy Smith on Wed, Oct 12, 2005 at 17:39:46 +1000 >> the make world documents mentioning backing up your system. it fails to >> give any preffered methods or utilites for doing this. anyone got some >> input on that. > > I find rdiff-backup to be very good indeed. It's in the port tree. Section 16.11 in the handbook. It's geared towards full-system backups, but that's probably a good idea anyways. Also, couldn't you use ffs snapshots as a backout plan? I don't see anything obvious to disregard everything after a snapshot in the man pages or handbook, however. I suppose you could do a recursive diff and copy the files from the snapshot to the current filesystem. -- Matt Piechota