From owner-freebsd-questions@FreeBSD.ORG Tue Apr 22 16:56:19 2014 Return-Path: <owner-freebsd-questions@FreeBSD.ORG> Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 3E9C3251 for <freebsd-questions@freebsd.org>; Tue, 22 Apr 2014 16:56:19 +0000 (UTC) Received: from mail-ob0-x232.google.com (mail-ob0-x232.google.com [IPv6:2607:f8b0:4003:c01::232]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 07C681FF9 for <freebsd-questions@freebsd.org>; Tue, 22 Apr 2014 16:56:18 +0000 (UTC) Received: by mail-ob0-f178.google.com with SMTP id wn1so6090912obc.9 for <freebsd-questions@freebsd.org>; Tue, 22 Apr 2014 09:56:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=Ym3q/m9NyYAtTU1sMUmH1sUkI4vGdSlTexpxW9T6Vr8=; b=jZqonFzwF6+/YpBszVueQ/I8ASsLhFUeBaJaFT/1RBGftA5ecwRgwEZwVDZwsgDgkJ Fe6Oxn+1l5m9+A6CLMINltLN/PJ+ddH+iyjQZR9649KxGn9eV0eNiDsWwLiSog4UJ7RH A4R1+XIwaPeYeWLctS9cAnEJ4ScvbKWVCi7UCzhstXps9WSJ+Cc/CAh4ErANX/Ooyz6I 5SpeBuFcjB8n9cBbFV4ngZlAp23Omx2hTloRF8rXNx2A4pVu1hid+4bFi6ufdehfC4IF iNvmVHjlHgf0b8bulWdeqGifjhkFIJNRWSYVTR3h5LKY6VDY9FRneSsDrwQa/7JbRJ2P 2qUA== MIME-Version: 1.0 X-Received: by 10.182.129.134 with SMTP id nw6mr32982290obb.34.1398185778318; Tue, 22 Apr 2014 09:56:18 -0700 (PDT) Received: by 10.60.144.137 with HTTP; Tue, 22 Apr 2014 09:56:18 -0700 (PDT) In-Reply-To: <EEAEE0B7-07F7-47FE-9F28-046DFD0EF881@gmail.com> References: <CAFS4T6aDE9QE4-05iSH2FmXj4hJu_V8KgWVKgjmUbGQ4w_zc_Q@mail.gmail.com> <EEAEE0B7-07F7-47FE-9F28-046DFD0EF881@gmail.com> Date: Tue, 22 Apr 2014 09:56:18 -0700 Message-ID: <CAFS4T6ZZZb7b6_r9FzhwVyQ1PDDL4M9YZF5umxkG2iS8mxzDTQ@mail.gmail.com> Subject: Re: How to apply security patches to applications within a jail? From: "edflecko ." <edflecko@gmail.com> To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: User questions <freebsd-questions.freebsd.org> List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe> List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/> List-Post: <mailto:freebsd-questions@freebsd.org> List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help> List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, <mailto:freebsd-questions-request@freebsd.org?subject=subscribe> X-List-Received-Date: Tue, 22 Apr 2014 16:56:19 -0000 Matt, That's not what I mean. Either before installing Apache from source or after you have it installed, you'd check for patches and then do something like: cd apache2x-whatever_version/ patch -p1 < patchfile recompile Unless I'm wrong, when you install from the port that's within the jail, I don't think you have the ability to apply the patches (after an announcement has been made and a security patch released to address the vulnerability) directly to the source code and then recompile, etc., etc.??? Ed