From owner-freebsd-stable@FreeBSD.ORG Sun Jun 29 10:45:39 2008 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 244681065679 for ; Sun, 29 Jun 2008 10:45:39 +0000 (UTC) (envelope-from andy.kosela@gmail.com) Received: from wa-out-1112.google.com (wa-out-1112.google.com [209.85.146.182]) by mx1.freebsd.org (Postfix) with ESMTP id F055B8FC14 for ; Sun, 29 Jun 2008 10:45:38 +0000 (UTC) (envelope-from andy.kosela@gmail.com) Received: by wa-out-1112.google.com with SMTP id j4so774259wah.3 for ; Sun, 29 Jun 2008 03:45:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:mime-version:content-type:content-transfer-encoding :content-disposition; bh=V2jVjNqAERnax8oqNai5RZfRSs+JPxjPedSH/2Ps4X0=; b=f0/gsxD8A7X/C21hNnCA8wsrhYo696h6Ei/dZZG+gty7K7yAeQCbyE80IP2XDegSla /VGmvS4myOu0mglUF0u5z6lOemC9c7kalAFD6eXblxtCQ91DJsUFkE/avrasLI6dQqFc zSscezHcuwm5PVa9J3tc74kCPRt6THk26xQ6A= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:mime-version:content-type :content-transfer-encoding:content-disposition; b=KHQikgukgRWePfYcBflq994girNGOYY+LQ5iUWSSMX7SkmQN6FgxQGixh/+6Ok5lb1 bEX6yej2+2L1xfkiIrHhH6zMwj684w+Et5mS/OO8yPl4jM+JjUL/cJKtjCa0yyuqPdUO cN8Gm9uHaJusUUG1InZqRcLGl/5yj6N8UBAOs= Received: by 10.114.195.19 with SMTP id s19mr3028973waf.110.1214736338477; Sun, 29 Jun 2008 03:45:38 -0700 (PDT) Received: by 10.114.112.6 with HTTP; Sun, 29 Jun 2008 03:45:38 -0700 (PDT) Message-ID: <3cc535c80806290345s2d7ec96bse2587642bcaf5086@mail.gmail.com> Date: Sun, 29 Jun 2008 12:45:38 +0200 From: "Andy Kosela" To: freebsd-stable@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline Subject: tracking -stable in the enterprise X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 29 Jun 2008 10:45:39 -0000 On Jun 25, 2008, at 3:46 AM, Peter Wemm wrote: >I think we still have FreeBSD-3.x machines in production. I know we >have FreeBSD-4.3. 99.9% of security issues don't affect us. We have >our own package system built on top of FreeBSD's pkg_add format and >have the ability to push packages to machines. If circumstances >warrant it, we can push a fix for something. It'll either push a new >binary or be a source patch that is compiled directly on the machines >in question. The machines run a custom software stack. More often >we push fixes for driver or performance fixes or things like timezone >updates. Ports infrastructure do not support such old FreeBSD versions, so how do you deal with that? Do you maintain your own CVS branches of selected packages and backports necessary security patches? I guess it demands considerable effort to compile the latest apache on FreeBSD 3.x or 4.x. -- Andy Kosela ora et labora