Security Updates and Patching Two Choices?

Chris racerx at makeworld.com
Mon Mar 29 12:04:56 PST 2004


On Monday 29 March 2004 01:28 pm, Sean Murphy wrote:
> I would like to stay patched with the latest security advisories.
> However usually I wait until the next release iso becomes available and
> do a fresh install that includes all the known exploites.  My reason
> behind this is the "makeworld", "CVSup", and "mergemaster" is very time
> consuming/complicated.  "Mergemaster" especially when I'm merging /etc
> files that I have no clue what they do.  I also don't want "all"
> sources compiled on my system.  I like a minimized OS.  I don't want to
> build "all" sources when I just need these on my system (bin, man, and
> crypto).  The same selection I use from a new install from
> /stand/sysinstall.  Is that possible?

Then perhaps freebsd-update is for you? (/usr/ports/security/freebsd-update)
From the file pkg-descr:

more pkg-descr 
This is the client half of the FreeBSD Update system; it fetches and
applies binary security updates.

WWW: http://www.daemonology.net/freebsd-update/

-- 
Best regards,
Chris


More information about the freebsd-questions mailing list