From owner-freebsd-security@FreeBSD.ORG Tue May 7 09:16:50 2013 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id 0996A5D5 for ; Tue, 7 May 2013 09:16:50 +0000 (UTC) (envelope-from giaffy@gmail.com) Received: from mail-oa0-f49.google.com (mail-oa0-f49.google.com [209.85.219.49]) by mx1.freebsd.org (Postfix) with ESMTP id D1E89A80 for ; Tue, 7 May 2013 09:16:49 +0000 (UTC) Received: by mail-oa0-f49.google.com with SMTP id l20so333155oag.36 for ; Tue, 07 May 2013 02:16:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:date:message-id:subject:from:to :content-type; bh=8YyFVl+tw5NmKDq7M3kJ+D1J0v0gj6Vxgy19vvWWdoM=; b=IQJYq786k6o4JUo2VHY5XBkutzMD1PGX7TJmrnQA8m5634okOf5iH/r56pcWW2kYqt 5QGVxs15yDGIuX2wAk4ExZurAcRdsAL7NTk5wGZUClDvdzsnwU3ETzYbYfjk75dW3c8j agGKlikG5SDkpueZSyOu3H+2emRiczQOOZ0hrSVgBtf+DOKABTPbmW73Eo/vIuj+kFds eQaVFnNyk0Wt7pWiRybXFZ38OE0Z/5PddiRa3lTPDy1pDUZEW45UrB04LmNMJaonHgfy hnv6sS/Xb6bOQjv0cnBdABxd6stlMKFBvH+cDiy30vUsNH0kZpWrGgM8N7DL8zZL/Ggs 12NA== MIME-Version: 1.0 X-Received: by 10.60.57.201 with SMTP id k9mr325417oeq.30.1367918208972; Tue, 07 May 2013 02:16:48 -0700 (PDT) Received: by 10.60.37.34 with HTTP; Tue, 7 May 2013 02:16:48 -0700 (PDT) Date: Tue, 7 May 2013 11:16:48 +0200 Message-ID: Subject: packages (binary) update best practice From: Roberto To: freebsd-security@freebsd.org Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.14 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 May 2013 09:16:50 -0000 Hi all, I have update recently to freebsd 9.1 via freebsd-update and I was quite happy with the process and the instructions on freebsd-handbook, I think well documented. But I would like to understand what is the best practice to update the ports too as I used the package tools (pkg_add -r) to add few package to the base install. Keeping in mind my server have disk space constrain (small disk install) I would ask an opinion about the followings methods to upgrade packages after a freebsd upgrade (in this case from 9.0 to 9.1): 1) perform # pkg_delete and then # pkg_add -r for each of them ? (I think about some package depends on other, this could create some little problem); 2) perform # pkg_add -F (not tried yet) and overwrite the already installed pkg ? 3) have a separate server on which create an update pkg from ports (ie from source) ? 4) use the new package system pkgng, converting the existing installation ? (this operation is not reversible, so I am waiting before doing this) I would have some ideas on this topic please, from a security perspective; Thanks Roberto