From owner-freebsd-questions@FreeBSD.ORG Sun Sep 30 07:11:53 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A40E516A419 for ; Sun, 30 Sep 2007 07:11:53 +0000 (UTC) (envelope-from rakhesh@rakhesh.com) Received: from wx-out-0506.google.com (wx-out-0506.google.com [66.249.82.226]) by mx1.freebsd.org (Postfix) with ESMTP id 769BB13C45B for ; Sun, 30 Sep 2007 07:11:53 +0000 (UTC) (envelope-from rakhesh@rakhesh.com) Received: by wx-out-0506.google.com with SMTP id i29so2410995wxd for ; Sun, 30 Sep 2007 00:11:52 -0700 (PDT) Received: by 10.70.24.3 with SMTP id 3mr7144700wxx.1191136312679; Sun, 30 Sep 2007 00:11:52 -0700 (PDT) Received: from smtp.home.rakhesh.com ( [82.178.131.120]) by mx.google.com with ESMTPS id i17sm6025471wxd.2007.09.30.00.11.50 (version=TLSv1/SSLv3 cipher=OTHER); Sun, 30 Sep 2007 00:11:51 -0700 (PDT) Received: from obelix.home.rakhesh.com (obelix.home.rakhesh.com [192.168.17.13]) by smtp.home.rakhesh.com (Postfix) with ESMTP id BBC141140D; Sun, 30 Sep 2007 11:09:25 +0400 (GST) Date: Sun, 30 Sep 2007 11:09:25 +0400 (GST) X-X-Sender: rakhesh@obelix.home.rakhesh.com To: Bill Stwalley In-Reply-To: <687f2b920709272243w3c25f0f7t95189f1aeb3ded71@mail.gmail.com> Message-ID: <20070930110630.Q79156@obelix.home.rakhesh.com> References: <687f2b920709262347l23b3d6cfv3969ea804f4963c3@mail.gmail.com> <200709270204.09915.beech@freebsd.org> <687f2b920709272243w3c25f0f7t95189f1aeb3ded71@mail.gmail.com> X-Blog: http://rakhesh.com/ X-Notes: http://rakhesh.net/ MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed From: Rakhesh Sasidharan Cc: freebsd-questions@freebsd.org Subject: Re: too late to change to security branch? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 30 Sep 2007 07:11:53 -0000 > I run freebsd-update and my cvsup configuration uses "*default release=cvs > tag=.". I am actually following security branch, since I do not recompile > the kernel, right? This cvs tag only matters if I compile the kernel, > right? If you are using freebsd-update then you are following the security branch. Even if you were using cvs and had to recompile the kernel (coz of some patch there) you would still be following the security branch (**if** you are tracking the security branch, that is). In FreeBSD, the base system and the 3rd party apps are separate. The base system has the concept of branches. The 3rd party apps (ports) are shared amongst all, there's no concept of branches. So you can't just follow security updates for the 3rd party apps. HTH, - Rakhesh http://rakhesh.net/