From owner-freebsd-security Tue Jul 2 16: 1: 3 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BCDC637B400 for ; Tue, 2 Jul 2002 16:00:57 -0700 (PDT) Received: from mail.gbronline.com (mail.gbronline.com [12.145.226.4]) by mx1.FreeBSD.org (Postfix) with ESMTP id 18A9743E13 for ; Tue, 2 Jul 2002 16:00:57 -0700 (PDT) (envelope-from kdk@daleco.biz) Received: from daleco [12.145.236.54] by mail.gbronline.com (SMTPD32-7.10) id A04852CA0100; Tue, 02 Jul 2002 17:59:20 -0500 Message-ID: <064901c2221c$4120ea20$edec910c@fbccarthage.com> From: "Kevin Kinsey, DaleCo, S.P." To: "Wincent Colaiuta" , References: <592EA664-8DE0-11D6-A483-003065C60B4C@mac.com> Subject: Re: security fixes Date: Tue, 2 Jul 2002 18:00:25 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org ----- Original Message ----- From: "Wincent Colaiuta" To: Sent: Tuesday, July 02, 2002 12:22 PM Subject: Re: security fixes El Tuesday, 2 July, 2002, a las 05:37 AM, Kevin Kinsey, DaleCo, S.P. escribió: > Some people read the warning about -STABLE in > the Handbook (that I quoted earlier) and decide only > to run -RELEASE and patch security fixes, and > there is a cvs tag for this, called RELENG_4_x. > This is where a little confusion comes in, because > after a while they quit patching the older releases. ]So on production systems track RELENG_4_6 now, and when that stops being ]updated, start tracking RELENG_4_7, and so on.... I can't see any ]problems with that. That way you're tracking the security fixes and ]critical patches, and then when you need to you're upgrading your entire ]system in safe way. ] ]I think the advice to not track STABLE on production machines is good. ]Sure, STABLE is mostly exactly that: STABLE. But there are always going ]to be exceptions... The last thing you want is a machine that won't boot ]after something went wrong and you have to pay $$$ to get access to the ]datacentre and rescue the machine... ] ]Cheers ]Wincent Nothing wrong with your advice either. Although in my world, if anyone's server quits responding, I've got a red carpet straight to the box as soon as I can get there... I'm in the 'small' world, though; to each his own....Wincent, are you in anyway related to a famous drummer? Kevin Kinsey To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message