From owner-freebsd-stable Thu Jan 2 13: 6:53 2003 Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 01D2A37B401 for ; Thu, 2 Jan 2003 13:06:52 -0800 (PST) Received: from tomts14-srv.bellnexxia.net (tomts14.bellnexxia.net [209.226.175.35]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1C96E43EB2 for ; Thu, 2 Jan 2003 13:06:51 -0800 (PST) (envelope-from dmagda@magda.ca) Received: from number6.magda.ca ([64.229.224.16]) by tomts14-srv.bellnexxia.net (InterMail vM.5.01.04.19 201-253-122-122-119-20020516) with ESMTP id <20030102210649.DPXS19947.tomts14-srv.bellnexxia.net@number6.magda.ca>; Thu, 2 Jan 2003 16:06:49 -0500 Received: from number6.magda.ca (localhost.magda.ca [127.0.0.1]) by number6.magda.ca (8.12.6/8.12.6) with ESMTP id h02L6n0k001145 (version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO); Thu, 2 Jan 2003 16:06:49 -0500 (EST) (envelope-from dmagda@magda.ca) Received: (from dmagda@localhost) by number6.magda.ca (8.12.6/8.12.6/Submit) id h02L6nDc001142; Thu, 2 Jan 2003 16:06:49 -0500 (EST) (envelope-from dmagda@number6.magda.ca) To: Bosko Milekic Cc: Murat Bicer , freebsd-stable@FreeBSD.ORG Subject: Re: Security updates on freebsd stable References: <3E0DCE12.5020707@tundraware.com> <20021228162832.3F26C17C92@www.fastmail.fm> <20021228114843.A14054@unixdaemons.com> Reply-To: dmagda@ee.ryerson.ca From: David Magda Date: 02 Jan 2003 16:06:48 -0500 In-Reply-To: <20021228114843.A14054@unixdaemons.com> Message-ID: <863cobfehj.fsf@number6.magda.ca> Lines: 22 User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.2 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Bosko Milekic writes: > You can do several things, depending on your needs. If these are > production servers then I would not recommend just blindly having them > cvsup RELENG_4 and rebuilding themselves every couple of weeks. > Instead, you may want to have one machine store and NFS export the [...] For production servers the Handbook recommends using RELENG_4_x; where x is the latest release. So now it would be at RELENG_4_7 since FreeBSD 4.7 is the latest release. RELENG_4 may not be the best if you're worried about 1000 servers. In early December there was a thread in this (-stable) mailing list entitled "update strategies" which may be of some interest to the original poster; I recommend you go through the archives and read it -- it has some good advice. -- David Magda Because the innovator has for enemies all those who have done well under the old conditions, and lukewarm defenders in those who may do well under the new. -- Niccolo Machiavelli, _The Prince_, Chapter VI To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message