From owner-freebsd-security@FreeBSD.ORG Wed Oct 12 20:50:40 2005 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B0B3316A41F for ; Wed, 12 Oct 2005 20:50:40 +0000 (GMT) (envelope-from timothy@open-networks.net) Received: from titan.open-networks.net (ns.open-networks.net [202.173.176.254]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2E9EA43D46 for ; Wed, 12 Oct 2005 20:50:39 +0000 (GMT) (envelope-from timothy@open-networks.net) Received: from [192.168.1.200] (tim.open-networks.net [192.168.1.1]) by titan.open-networks.net (Postfix) with ESMTP id 26FC46E5; Thu, 13 Oct 2005 06:50:37 +1000 (EST) Message-ID: <434D771C.9000708@open-networks.net> Date: Thu, 13 Oct 2005 06:50:36 +1000 From: Timothy Smith User-Agent: Mozilla Thunderbird 1.0.7 (X11/20051002) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Matt Piechota References: <200510111202.j9BC2obf081876@freefall.freebsd.org> <1129036481.434bbac1720a6@webmail.boxke.be> <434BBF09.6040101@htnet.hr> <434CBDC2.4070405@open-networks.net> <20051012082159.GA54387@kierun.org> <41508.192.35.35.35.1129134388.squirrel@webmail.gigatrex.com> In-Reply-To: <41508.192.35.35.35.1129134388.squirrel@webmail.gigatrex.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: Yann Golanski , freebsd-security@freebsd.org Subject: Re: FreeBSD Security Advisory FreeBSD-SA-05:21.openssl X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Oct 2005 20:50:40 -0000 Matt Piechota wrote: >On Wed, October 12, 2005 4:21 am, Yann Golanski wrote: > > >>Quoth Timothy Smith on Wed, Oct 12, 2005 at 17:39:46 +1000 >> >> >>>the make world documents mentioning backing up your system. it fails to >>>give any preffered methods or utilites for doing this. anyone got some >>>input on that. >>> >>> >>I find rdiff-backup to be very good indeed. It's in the port tree. >> >> > >Section 16.11 in the handbook. It's geared towards full-system backups, but >that's probably a good idea anyways. > >Also, couldn't you use ffs snapshots as a backout plan? I don't see anything >obvious to disregard everything after a snapshot in the man pages or handbook, >however. I suppose you could do a recursive diff and copy the files from the >snapshot to the current filesystem. > > > ffs snap shots are all very well when i have pyshical access to the machine.