upgrade

Eric Crist ecrist at secure-computing.net
Wed Aug 11 16:21:38 PDT 2004


Paul Schmehl wrote:
> --On Wednesday, August 11, 2004 12:59:46 AM -0500 Eric Crist
> <ecrist at secure-computing.net> wrote:
>>
>> The difference between a binary upgrade and an upgrade via CVS or
>> cvsup is the time between creation of the sources.  Binary upgrades
>> generally come out durning major releases, for example, from 4.9 to
>> 4.10.  Any security patches added between that time were only
>> available with a CVS/cvsup upgrade, followed by a system rebuild.
>>
> This is simply not true.  You can upgrade all the sources using
> freebsd-update.  Look in /usr/ports/security/freebsd-update.
> I use this on
> production servers now to lessen downtime.  All you have to
> do is a fetch,
> then an install, then reboot, and you're done.  On a production
webserver
> getting millions of hits a month, this is a godsend.
>
> Paul Schmehl (pauls at utdallas.edu)
> Adjunct Information Security Officer
> The University of Texas at Dallas
> AVIEN Founding Member
> http://www.utdallas.edu/ir/security/


My bad, I wasn't aware of this software.

I stand corrected.

Thanks!

Found on Conan O'Brian:
Children's books written by celebrities;
   By Mel Gibson: Jesus Christ and the Terrible, Horrible, No Good, Very
Bad Day.

-----
Keep your powder dry and your pecker hard and the world WILL turn.

-----
Eric F Crist




More information about the freebsd-questions mailing list