From owner-freebsd-questions@FreeBSD.ORG Mon Mar 29 12:08:00 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 86BB516A4CE for ; Mon, 29 Mar 2004 12:08:00 -0800 (PST) Received: from smtpout.mac.com (A17-250-248-88.apple.com [17.250.248.88]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7726C43D2F for ; Mon, 29 Mar 2004 12:08:00 -0800 (PST) (envelope-from cswiger@mac.com) Received: from mac.com (smtpin08-en2 [10.13.10.153]) by smtpout.mac.com (Xserve/MantshX 2.0) with ESMTP id i2TK7xi1011382; Mon, 29 Mar 2004 12:07:59 -0800 (PST) Received: from [10.1.1.193] (nfw2.codefab.com [199.103.21.225] (may be forged)) (authenticated bits=0)i2TK7mW8017423; Mon, 29 Mar 2004 12:07:58 -0800 (PST) In-Reply-To: <38632096-81B7-11D8-A410-00039352A78A@calarts.edu> References: <38632096-81B7-11D8-A410-00039352A78A@calarts.edu> Mime-Version: 1.0 (Apple Message framework v613) Content-Type: text/plain; charset=US-ASCII; format=flowed Message-Id: Content-Transfer-Encoding: 7bit From: Charles Swiger Date: Mon, 29 Mar 2004 15:07:42 -0500 To: Sean Murphy X-Mailer: Apple Mail (2.613) cc: freebsd-questions@freebsd.org Subject: Re: Security Updates and Patching Two Choices? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Mar 2004 20:08:00 -0000 On Mar 29, 2004, at 2:28 PM, Sean Murphy wrote: > I don't want to build "all" sources when I just need these on my > system (bin, man, and crypto). The same selection I use from a new > install from /stand/sysinstall. Is that possible? If you look at /etc/default/make.conf for a bunch of components starting with NO_, you can set those to get something close to what you've asked for. > It seem the "makeworld" process is the only way to keep the system > patched. Someone (Colin Percival?) has a binary updating system available for FreeBSD which might be easier for you to use. > If a tag just the 4_9 Release in the CVSupfile can i just ignore the > mergemaster? also can I just CVSup the sources and build the ones I > want? (see above) Generally one can ignore doing the mergemaster simply for a security patch. Yes, you can use CVSup to update your local sources with the fix instead of applying a patch by hand. Using a tag of RELENG_4 (aka STABLE) or RELENG_4_9 (aka security branch of 4.9) should be what you want. -- -Chuck