From owner-freebsd-ports@FreeBSD.ORG Wed Mar 26 19:32:52 2008 Return-Path: Delivered-To: ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6F5CC106564A for ; Wed, 26 Mar 2008 19:32:52 +0000 (UTC) (envelope-from delphij@delphij.net) Received: from tarsier.delphij.net (delphij-pt.tunnel.tserv2.fmt.ipv6.he.net [IPv6:2001:470:1f03:2c9::2]) by mx1.freebsd.org (Postfix) with ESMTP id 1A1708FC20 for ; Wed, 26 Mar 2008 19:32:52 +0000 (UTC) (envelope-from delphij@delphij.net) Received: from tarsier.geekcn.org (tarsier.geekcn.org [202.108.54.204]) (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by tarsier.delphij.net (Postfix) with ESMTPS id DD67728458 for ; Thu, 27 Mar 2008 03:32:50 +0800 (CST) Received: from localhost (tarsier.geekcn.org [202.108.54.204]) by tarsier.geekcn.org (Postfix) with ESMTP id F3B0AEC42AB; Thu, 27 Mar 2008 03:32:49 +0800 (CST) X-Virus-Scanned: amavisd-new at geekcn.org Received: from tarsier.geekcn.org ([202.108.54.204]) by localhost (mail.geekcn.org [202.108.54.204]) (amavisd-new, port 10024) with ESMTP id RKEM1sCPkyth; Thu, 27 Mar 2008 03:32:45 +0800 (CST) Received: from charlie.delphij.net (71.5.7.139.ptr.us.xo.net [71.5.7.139]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by tarsier.geekcn.org (Postfix) with ESMTPSA id E7A09EC42A4; Thu, 27 Mar 2008 03:32:43 +0800 (CST) DomainKey-Signature: a=rsa-sha1; s=default; d=delphij.net; c=nofws; q=dns; h=message-id:date:from:reply-to:organization:user-agent: mime-version:to:cc:subject:references:in-reply-to: x-enigmail-version:openpgp:content-type:content-transfer-encoding; b=B3VCQv+I1BYpVH9Xkg5R7hxyd6HwHM6TyQoQoDruQkly3SoL8vLgqLK31JeV/JBjY OwZo8AHLdeXJKeL6IUgoQ== Message-ID: <47EAA4D9.8060609@delphij.net> Date: Wed, 26 Mar 2008 12:32:41 -0700 From: Xin LI Organization: The FreeBSD Project User-Agent: Thunderbird 2.0.0.12 (X11/20080312) MIME-Version: 1.0 To: Siju George References: In-Reply-To: X-Enigmail-Version: 0.95.6 OpenPGP: id=18EDEBA0; url=http://www.delphij.net/delphij.asc Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: ports@freebsd.org Subject: Re: Applying security updates to ports. X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: d@delphij.net List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Mar 2008 19:32:52 -0000 Siju George wrote: > Hi, > > As far as I understand there is the ports tree that is released along > with an OS release and the security updates to specific ports has to > be followed through info on > > http://wiki.samba.org/index.php/Samba4/HOWTO#Testing_Samba4_Active_Directory_in_Ubuntu_7.04_howto > > right? > > I ask this because I am more familiar with OpenBSD and it has > > 1) The ports tree that comes with the OS Release > 2) The ports tree that gets only security updates ( called ports-stable) > 3) The ports tree that has newer versions of ports ( called ports-current ) Currently we do not maintain many branches as OpenBSD did due to limited human and compiling resources. What I usually do on FreeBSD is: - Update ports tree; - Install portupgrade, portaudit (both under ports-mgmt/) - portupgrade -rR `portaudit -Fqa` The third step would update affected ports and their required dependencies plus ports depending on them. This is not perfect (if there is shared library version bump, but dependent ports revison is not bumped) but works just fine in most cases. Cheers, -- Xin LI http://www.delphij.net/ FreeBSD - The Power to Serve!