From owner-freebsd-questions Sat Dec 1 9: 3:16 2001 Delivered-To: freebsd-questions@freebsd.org Received: from guru.mired.org (okc-65-31-203-60.mmcable.com [65.31.203.60]) by hub.freebsd.org (Postfix) with SMTP id 3472A37B416 for ; Sat, 1 Dec 2001 09:03:13 -0800 (PST) Received: (qmail 71738 invoked by uid 100); 1 Dec 2001 17:03:12 -0000 From: Mike Meyer MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <15369.3408.391407.207170@guru.mired.org> Date: Sat, 1 Dec 2001 11:03:12 -0600 To: Kevin Golding Cc: questions@freebsd.org Subject: Re: patching systems using pkg_add In-Reply-To: <87471076@toto.iv> X-Mailer: VM 6.90 under 21.1 (patch 14) "Cuyahoga Valley" XEmacs Lucid X-face: "5Mnwy%?j>IIV\)A=):rjWL~NB2aH[}Yq8Z=u~vJ`"(,&SiLvbbz2W`;h9L,Yg`+vb1>RG% *h+%X^n0EZd>TM8_IB;a8F?(Fb"lw'IgCoyM.[Lg#r\ Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Kevin Golding types: > Having used the binary patches from a couple of security advisories on a > 4.3 release system I now find myself pondering what to do next. The > issue is that I'm intending to cvsup and I'm not sure how to deal with > the patches. > > I figure I shouldn't run pkg_delete after I upgrade since I'm paranoid > I'll delete something I need from the new setup and I'd rather not just > leave them sitting around for no reason. > > That leaves 2 options in my mind, firstly I could run pkg_delete before > doing make world etc. or maybe I could just upgrade then manually delete > the entries from /var/db/pkg > > I think I prefer the sound of the latter since it seems the least > intrusive and I feel it should reduce the chance or troubles. > > So, how far off the mark am I? I think I agree with you. Installing the new world will presumably overwrite the binary patches, so the information in /var/db/pkg is unneeded. You might try asking security@freebsd.org - I think that's the address of the security officer - to see what they think. http://www.mired.org/home/mwm/ Independent WWW/Perforce/FreeBSD/Unix consultant, email for more information. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message