From owner-freebsd-questions@FreeBSD.ORG Sat Feb 10 22:32:32 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 1729716A402 for ; Sat, 10 Feb 2007 22:32:32 +0000 (UTC) (envelope-from bsdquestions@gmail.com) Received: from nz-out-0506.google.com (nz-out-0506.google.com [64.233.162.234]) by mx1.freebsd.org (Postfix) with ESMTP id D3AD313C4A8 for ; Sat, 10 Feb 2007 22:32:31 +0000 (UTC) (envelope-from bsdquestions@gmail.com) Received: by nz-out-0506.google.com with SMTP id i11so1251037nzh for ; Sat, 10 Feb 2007 14:32:31 -0800 (PST) DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:user-agent:mime-version:to:subject:content-type:content-transfer-encoding; b=ooGuWf5yNRsAVaXbCyP8n0ii6uh/3F4PFmEXlg8mQa/5x0+Z3i3FIPDdk0+enhrxnS6hdq9fIaXZj92wl8/1AEvidr3USrSq/42ipF6dOsYNoC4agn6D7hf23Bz7y8niEoLCfkjmsg+l9o/0sonMC/bJmMffUA0Kf/CaCdD5IyE= Received: by 10.64.233.12 with SMTP id f12mr3851358qbh.1171145207322; Sat, 10 Feb 2007 14:06:47 -0800 (PST) Received: from ?192.168.1.2? ( [71.59.152.225]) by mx.google.com with ESMTP id 15sm26056193nzn.2007.02.10.14.06.45; Sat, 10 Feb 2007 14:06:45 -0800 (PST) Message-ID: <45CE41ED.3050900@gmail.com> Date: Sat, 10 Feb 2007 14:06:37 -0800 From: Michael User-Agent: Thunderbird 1.5.0.9 (Windows/20061207) MIME-Version: 1.0 To: FreeBSD - Questions Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: cvsup tag for ports X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Feb 2007 22:32:32 -0000 Hello everyone, I'm building a production server and I have what may seem to be a very simple question so I hope it only requires a simple answer. As I've studied the FreeBSD Handbook as well as the man pages for this, it's still not clear to me which tag I should use for a production server. For my sources I always use the security branch for the release we are using so that they stay stable and also plug most of the security issues as they arise and so the sources tag is always RELENG_6_2. For the ports, the default tag is always tag=. which I'm not sure is the best thing for a production server since that's the tab for -CURRENT. On one hand it makes sense to track that branch for ports because that's where fixes would go for applications as they find them, but I'm not convinced this is the best thing for a production server and wonder if I should also use the security branch for the ports. My first question is, does any real security fixes go into the ports when you pull from a security branch? In other words, do maintainers actually submit fixes to that branch for the ports? I have a similiar question for the docs as well, should we be tracking only the security branch when using cvsup for sources, ports and doc's? I'd appreciate any and all feedback on this issue. Thank you for your replies in advance, Michael Lawver