Tracking Security in Ports and Base System

[Chris Hill]

On Wed, 8 Feb 2006, Chris Maness wrote:

> How should I set up cvsup to just track security updates for ports. 
> And would the best thing to do after I synced CVS, do portupgrade -a 
> so that everything selected gets rebuilt.

I'm not sure there is a way to do this for ports, other than manually 
checking what's been changed and whether you consider that to be a 
security upgrade, then upgrading each applicable port by hand. As far as 
I understand, there is only one tag for ports ("tag=."), which gets you 
the "current" ports tree. I *can* guarantee that others know more about 
this than I do.

> What is the equivalent for the base system?

Much simpler: just track RELENG_your_release to get security updates and 
bug fixes and nothing else. For example, mine is RELENG_5_4 and 
therefore tracks 5.4-RELEASE.

HTH.

--
Chris Hill               chris at monochrome.org
**                     [ Busy Expunging <|> ]