From owner-freebsd-questions@FreeBSD.ORG Wed Aug 1 20:15:55 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9704216A41B; Wed, 1 Aug 2007 20:15:55 +0000 (UTC) (envelope-from jeffrey@goldmark.org) Received: from out2.smtp.messagingengine.com (out2.smtp.messagingengine.com [66.111.4.26]) by mx1.freebsd.org (Postfix) with ESMTP id 51ED013C45A; Wed, 1 Aug 2007 20:15:55 +0000 (UTC) (envelope-from jeffrey@goldmark.org) Received: from compute2.internal (compute2.internal [10.202.2.42]) by out1.messagingengine.com (Postfix) with ESMTP id C4817BC97; Wed, 1 Aug 2007 16:15:54 -0400 (EDT) Received: from heartbeat2.messagingengine.com ([10.202.2.161]) by compute2.internal (MEProxy); Wed, 01 Aug 2007 16:15:54 -0400 X-Sasl-enc: 0jFZ8iRwUzozQqcZecgw0PPdZVQPACukDKC8q9LpJD8u 1185999354 Received: from [10.1.10.136] (n114.ewd.goldmark.org [72.64.118.114]) by mail.messagingengine.com (Postfix) with ESMTP id 5178C17624; Wed, 1 Aug 2007 16:15:54 -0400 (EDT) In-Reply-To: <46B0DB5F.4020401@FreeBSD.org> References: <499c70c0707260136hea82f27s87dfa53432d0e409@mail.gmail.com> <94c6ae7ae570814564d364bfe9aad8ea@szalbot.homedns.org> <20070801030504.GA3773@bifrost.agrussell.com> <426DE541-FB51-44FF-B7F4-B34E0F9A7861@goldmark.org> <46B0DB5F.4020401@FreeBSD.org> Mime-Version: 1.0 (Apple Message framework v752.2) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: <60BEAECB-C72A-46B3-90D7-F3AB8778605D@goldmark.org> Content-Transfer-Encoding: 7bit From: Jeffrey Goldberg Date: Wed, 1 Aug 2007 15:15:52 -0500 To: Doug Barton X-Mailer: Apple Mail (2.752.2) Cc: Zbigniew Szalbot , "A.G. Russell IV" , Freebsd questions Subject: Re: Waiting for BIND security announcement X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Aug 2007 20:15:55 -0000 On Aug 1, 2007, at 2:13 PM, Doug Barton wrote: > If you want to stay as close as possible to 6.2-RELEASE but also > include the fixes that the security officer deems important enough to > release widely, use the tag RELENG_6_2 (usually in your supfile for > cvsup or csup). If you want the latest code for 6-stable, which will > eventually become 6.3-RELEASE, use just RELENG_6. Thank you. I wasn't clear in my original message. I meant to talk about RELENG_6_2 which is what I meant when I said "6.2 Release with patches". But I fully acknowledge that while I've used RCS for ages, I still don't fully grok branches and trunks (or HEADs in CVS), so I do state things badly and can always use the reminder of how things work. Anyway, I was disappointed that the BIND fix didn't make it into RELENG_6_2. But ... > When it comes to BIND stuff in particular, I always update the ports > first, so anyone with a mission critical DNS operation can get fixes > ASAP. There is even an option in the port to overwrite the base BIND > if you so desire. Ah-ha. That makes a big difference. OK. If I'm going to expose my name server to the big bad world while tracking RELENG_N_M ("release with patches") I'll use bind from ports. Are there other things in /usr/src/contrib that follow this pattern? > hth, Yes, it helps a great deal. Thank you very much for your work on this and your patience with me. -j -- Jeffrey Goldberg http://www.goldmark.org/jeff/