From owner-freebsd-questions@FreeBSD.ORG Tue Jun 17 05:40:14 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 576521065675 for ; Tue, 17 Jun 2008 05:40:14 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from smtp.infracaninophile.co.uk (gate6.infracaninophile.co.uk [IPv6:2001:8b0:151:1::1]) by mx1.freebsd.org (Postfix) with ESMTP id C80BD8FC24 for ; Tue, 17 Jun 2008 05:40:13 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from happy-idiot-talk.infracaninophile.co.uk (localhost [IPv6:::1]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.14.2/8.14.2) with ESMTP id m5H5e6w1097789; Tue, 17 Jun 2008 06:40:08 +0100 (BST) (envelope-from m.seaman@infracaninophile.co.uk) X-DKIM: Sendmail DKIM Filter v2.5.5 smtp.infracaninophile.co.uk m5H5e6w1097789 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=infracaninophile.co.uk; s=200708; t=1213681208; bh=macx9yzu2ei2um T+MzFV5dwbzpFsxOXwgn/878SvaFI=; h=Message-ID:Date:From:MIME-Version: To:CC:Subject:References:In-Reply-To:Content-Type:Cc:Content-Type: Date:From:In-Reply-To:Message-ID:Mime-Version:References:To; z=Mes sage-ID:=20<48574E2E.4030508@infracaninophile.co.uk>|Date:=20Tue,=2 017=20Jun=202008=2006:39:58=20+0100|From:=20Matthew=20Seaman=20|Organization:=20Infracaninophile|User -Agent:=20Thunderbird=202.0.0.14=20(X11/20080607)|MIME-Version:=201 .0|To:=20cco1817-0@yahoo.de|CC:=20freebsd-questions@freebsd.org|Sub ject:=20Re:=20Release=20engineering=20process=20confusions=20and=20 "make=20(build)world"|References:=20<122990.26809.qm@web27607.mail. ukl.yahoo.com>|In-Reply-To:=20<122990.26809.qm@web27607.mail.ukl.ya hoo.com>|X-Enigmail-Version:=200.95.6|Content-Type:=20multipart/sig ned=3B=20micalg=3Dpgp-sha256=3B=0D=0A=20protocol=3D"application/pgp -signature"=3B=0D=0A=20boundary=3D"------------enig892754361D48099F 354C3B81"; b=wsbNt1NrRuOFBjav2w8PIU2p+Qdt9GLvIcK7TRIqT9u2iVezDb6K4z 1R4HtSkVAzgateY+m0XXzvYLyJSYfJERmp/BBoSj5g7I8QyEIX2vSRGflgMFJh4gObZ BXbhWS30z2yepG6a7G5Pp3J1f+C1TDy/yt7O7a9H8bNILk3jD4= Message-ID: <48574E2E.4030508@infracaninophile.co.uk> Date: Tue, 17 Jun 2008 06:39:58 +0100 From: Matthew Seaman Organization: Infracaninophile User-Agent: Thunderbird 2.0.0.14 (X11/20080607) MIME-Version: 1.0 To: cco1817-0@yahoo.de References: <122990.26809.qm@web27607.mail.ukl.yahoo.com> In-Reply-To: <122990.26809.qm@web27607.mail.ukl.yahoo.com> X-Enigmail-Version: 0.95.6 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------enig892754361D48099F354C3B81" X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0 (smtp.infracaninophile.co.uk [IPv6:::1]); Tue, 17 Jun 2008 06:40:08 +0100 (BST) X-Virus-Scanned: ClamAV 0.93/7358/Wed Jun 4 12:41:00 2008 on happy-idiot-talk.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-3.0 required=5.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VERIFIED,NO_RELAYS autolearn=ham version=3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on happy-idiot-talk.infracaninophile.co.uk Cc: freebsd-questions@freebsd.org Subject: Re: Release engineering process confusions and "make (build)world" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Jun 2008 05:40:14 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig892754361D48099F354C3B81 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: quoted-printable cco1817-0@yahoo.de wrote: > 1. Some SA's say that the a bug is corrected in a particular RELENG > or RELEASE or a patched RELEASE. For example FreeBSD-SA-08:05.openssh > states that >>RELENG_7_0, 7.0-RELEASE-p1<<. But where can I get a > -p1??? I've never seen iso-images for a x.y-RELEASE-pnn. Is this the > time where I need to build a release (as iso-image) by myself? If so, > what branch-tag do I need to get 7.0-RELEASE-p1?>=20 If you use c(v)sup or freebsd-update to track one of the security branche= s (eg RELENG_7_0) then with each patch release you'll also get updates to the version number as reported by the system. (ie. you get a re-compiled= kernel with an updated version compiled into it). If you track one of the security branches by applying the patches distributed in the advisories, functionally you'll have the same effect -= - the security holes will be patched, etc. -- but unless the flaw is in the kernel code, you won't get a new kernel, hence no change to the version number the system reports. It's a toss-up. Either you do the minimal amount of work needed to=20 secure and maintain your system, or you take a bit more time and effort and you reboot a bit more frequently and you get a system that also records what updates have been applied. Which of those you choose is entirely a matter of local policy. There is extensive information in the handbook about all the different mechanisms that exist for tracking any of the various development or security branches. There should also be snapshot iso-images generated from development branches on a regular schedule, not that that helps with your specific question: http://www.freebsd.org/snapshots/ Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate Kent, CT11 9PW --------------enig892754361D48099F354C3B81 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEAREIAAYFAkhXTjYACgkQ8Mjk52CukIzQ7ACffTf0tF7O+EbcPZJHf5Fca9m5 P/EAn0xgi0WLqQviE0I3/j7pZCdfLZ7y =dd9C -----END PGP SIGNATURE----- --------------enig892754361D48099F354C3B81--