From owner-freebsd-security@FreeBSD.ORG  Sat Sep 27 12:40:38 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id D2D8F16A4B3
	for <freebsd-security@freebsd.org>;
	Sat, 27 Sep 2003 12:40:38 -0700 (PDT)
Received: from harrier.mail.pas.earthlink.net (harrier.mail.pas.earthlink.net
	[207.217.120.12])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 3E58743FDD
	for <freebsd-security@freebsd.org>;
	Sat, 27 Sep 2003 12:40:38 -0700 (PDT)
	(envelope-from vjones62@earthlink.net)
Received: from skeeter.psp.pas.earthlink.net ([207.217.78.186])
	by harrier.mail.pas.earthlink.net with esmtp (Exim 3.33 #1)
	id 1A3Kvl-00035R-00
	for freebsd-security@freebsd.org; Sat, 27 Sep 2003 12:40:37 -0700
Message-ID: <11778415.1064691636010.JavaMail.root@skeeter.psp.pas.earthlink.net>
Date: Sat, 27 Sep 2003 15:40:35 -0400 (GMT-04:00)
From: "V. Jones" <vjones62@earthlink.net>
To: freebsd-security@freebsd.org
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: Earthlink Zoo Mail 1.0
Subject: Re: FreeBSD Patch question
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: "V. Jones" <vjones62@earthlink.net>
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 27 Sep 2003 19:40:39 -0000

Thanks to everyone who responded - my question really had more to do with applying patches as they are presented in the various security advisories.  It sounds like most of you don't do it that way; it sounds like you track freebsd-stable using cvsup.  However, section 21.2.2.2 of the handbook seems to advise against doing this when all you want to do is apply security fixes:

"While it is true that security fixes also go into the FreeBSD-STABLE branch, you do not need to track FreeBSD-STABLE to do this. Every security advisory for FreeBSD explains how to fix the problem for the releases it affects [1] , and tracking an entire development branch just for security reasons is likely to bring in a lot of unwanted changes as well."

My intention is to apply the patches as instructed in the advisories.  I'll resolve my issues with pgp so that I can validate the files first, then apply them one at a time.