From owner-freebsd-questions@FreeBSD.ORG Thu Jun 15 19:42:14 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D2BDE16A41A for ; Thu, 15 Jun 2006 19:42:14 +0000 (UTC) (envelope-from wmoran@collaborativefusion.com) Received: from mx00.pub.collaborativefusion.com (mx00.pub.collaborativefusion.com [206.210.89.199]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5E83F43D45 for ; Thu, 15 Jun 2006 19:42:14 +0000 (GMT) (envelope-from wmoran@collaborativefusion.com) Received: from collaborativefusion.com (mx01.pub.collaborativefusion.com [206.210.89.201]) (TLS: TLSv1/SSLv3,256bits,AES256-SHA) by wingspan with esmtp; Thu, 15 Jun 2006 15:42:13 -0400 id 00056417.4491B815.000123B3 Received: from Internal Mail-Server by mx01 (envelope-from wmoran@collaborativefusion.com) with AES256-SHA encrypted SMTP; 15 Jun 2006 15:34:32 -0400 Date: Thu, 15 Jun 2006 15:42:12 -0400 From: Bill Moran To: Greg Groth Message-Id: <20060615154212.c08bf59c.wmoran@collaborativefusion.com> In-Reply-To: <4491B615.1080704@gregs-garage.com> References: <4491B615.1080704@gregs-garage.com> Organization: Collaborative Fusion X-Mailer: Sylpheed version 2.2.6 (GTK+ 2.8.19; i386-portbld-freebsd6.1) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org Subject: Re: clarification of cvsup process. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Jun 2006 19:42:14 -0000 In response to Greg Groth : > I have a FreeBSD 6.0 server that I manage that is used as a DNS / mail > server. In the wake of the recent sendmail security announcement, I'd > like to make sure I'm keeping the thing up to date. I tried to run the > patch as listed in the announcement, but the patch just seemed to hang, > so I killed the process and decided to go the cvsup route. now I > understand the whole cvsup process, as well as updating ports, but the > whole release tag thing still has me confused. If possible could > someone tell me if I'm doing this right or not, or have someone tell me > what I'm doing wrong. > > I'm only interested in updating the system when a security need arises, > and have no desire to live on the "cutting edge". I handle the ports > through portaudit/portsnap/portmanager, and am looking to only update > the case system with cvsup. > > Here is the list of commands I run to update the system. > > # cvsup /usr/local/greg/cvsupfile > > Contents of cvsupfile: > > *default host=cvsup6.FreeBSD.org > *default base=/var/db > *default prefix=/usr > *default release=cvs tag=RELENG_6_0 > *default delete use-rel-suffix > > > src-all > *default tag=. Note that you set the tag=RELENG_6_0 ... which is what you want, then you reset it tag=. -- which will give you 6-STABLE -- not what you want. Remove the *default tag=. line. > # cd /usr/src > # make buildworld > # make buildkernel > # make installkernel > # reboot > > After rebooting into single user mode: > > # fsck -p > # mount -u / > # mount -a -t ufs > # swapon -a > # adjkerntz -i > # mergemaster -p > # make installworld > # mergemaster > # reboot > > After rebooting: > > # cd /etc/mail > # make all > # make install > # make restart > > And that's it. I do the stuff in /etc/mail since I'm not sure running > make buildworld will update the cf files. The last patch that came out, > I did the same thing I outlined above, but I did not notice a change in > the version number of Sendmail when telnetting to it. I don't know if the patch updates sendmail's internal version or not. What does uname -a tell you after the upgrade? -- Bill Moran Collaborative Fusion Inc.