From owner-freebsd-questions@FreeBSD.ORG Fri Dec 12 03:23:59 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7602216A4CE for ; Fri, 12 Dec 2003 03:23:59 -0800 (PST) Received: from dire.bris.ac.uk (dire.bris.ac.uk [137.222.10.60]) by mx1.FreeBSD.org (Postfix) with ESMTP id 48EFF43D09 for ; Fri, 12 Dec 2003 03:23:57 -0800 (PST) (envelope-from Jan.Grant@bristol.ac.uk) Received: from mail.ilrt.bris.ac.uk by dire.bris.ac.uk with SMTP-PRIV with ESMTP; Fri, 12 Dec 2003 11:19:33 +0000 Received: from cmjg (helo=localhost) by mail.ilrt.bris.ac.uk with local-esmtp (Exim 3.16 #1) id 1AUlJW-0005yJ-00; Fri, 12 Dec 2003 11:18:30 +0000 Date: Fri, 12 Dec 2003 11:18:29 +0000 (GMT) From: Jan Grant X-X-Sender: cmjg@mail.ilrt.bris.ac.uk To: Vahric MUHTARYAN In-Reply-To: <045e01c3c02b$d7402da0$019c9752@xp> Message-ID: References: <045e01c3c02b$d7402da0$019c9752@xp> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: Jan Grant cc: FreeBSD questions List Subject: Re: last question about up-to-date ( I hope ) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Dec 2003 11:23:59 -0000 On Thu, 11 Dec 2003, Vahric MUHTARYAN wrote: > Hi , > > For keep up to date FreeBSD I think all people are using source update > method ( When I sent a message to list almost everybody adviced this ) Only > one person said that binary update but this is not recommanded because > compiled version always work better and I saw that compile update program is > not working quickly because Colin Percival waiting lest version .... > > > I'm just wonder Why patching is not used instead of source update.. > it's patching source tree too for security bugs ... I checking output of the > cvsup -g -L 2 stable-supfile command . it's only download openssh , bind and > like this almost what writen in security advisories . > > if you said soruce-update method more then security update Thats Okey . > But I want to know or understand if I don't want to use new features and > only interest with security updates ( patch updates ) Why patches does not > enough ?! You _are_ downloading patches when you use cvsup. However, the tool provides a handy level of automation and therefore can prevent simple pilot error compared to hand-application of patches. You are not required to track the -STABLE branch. Every (recent) release also has a maintenance branch, which merely receives security updates. Cvsup can track these just as easily for you. The handbook has more information on this. -- jan grant, ILRT, University of Bristol. http://www.ilrt.bris.ac.uk/ Tel +44(0)117 9287088 Fax +44 (0)117 9287112 http://ioctl.org/jan/ Political talk? / What is said can be unsaid / with good old BS -- ASCII haiku