Re: portmaster best practices

2012-01-25 Thread Victor Sudakov
Volodymyr Kostyrko wrote: [dd] NO_BACKUP means don't create a temporary package when deleting something. This is unsuitable for me as /usr/ports in my network is distributed via NFS ro. I also share /usr/ports via NFS ro, but I have defined PACKAGES=/var/tmp/packages in portmaster.rc to

Re: portmaster best practices

2012-01-24 Thread Victor Sudakov
Volodymyr Kostyrko wrote: If portaudit shows that some installed packages have vulnerabilities, what do you usually do? Greatly depend on where am I. All my systems are staying up-to-date whereas when I'm visiting someones system I prefer to update only required pieces of software.

Re: portmaster best practices

2012-01-24 Thread Victor Sudakov
Roland Smith wrote: If portaudit shows that some installed packages have vulnerabilities, what do you usually do? It depends on the vulnerability and what the package does. I will de-install it if I think that the vulnerability is critical for me and there is no workaround. Look at

Re: portmaster best practices

2012-01-24 Thread Volodymyr Kostyrko
Victor Sudakov wrote: If portaudit shows that some installed packages have vulnerabilities, what do you usually do? Greatly depend on where am I. All my systems are staying up-to-date whereas when I'm visiting someones system I prefer to update only required pieces of software. Anyway if you

Re: portmaster best practices

2012-01-24 Thread Roland Smith
On Tue, Jan 24, 2012 at 03:49:05PM +0700, Victor Sudakov wrote: Generally I like to run 'portsnap fetch update' followed by 'portmaster -ai' (after reading /usr/ports/UPDATING) every week. This keeps the number of huge compilefests (like gettext updates :-() to a minimum. Has

portmaster best practices

2012-01-23 Thread Victor Sudakov
Hello portmaster users, If portaudit shows that some installed packages have vulnerabilities, what do you usually do? Do you upgrade only the vulnerable packages, or vulnerable packages and dependent packages (portmaster -r), or perhaps all packages (portmaster -a)? Or do you pkg_delete -a all

Re: portmaster best practices

2012-01-23 Thread Volodymyr Kostyrko
Victor Sudakov wrote: Hello portmaster users, If portaudit shows that some installed packages have vulnerabilities, what do you usually do? Greatly depend on where am I. All my systems are staying up-to-date whereas when I'm visiting someones system I prefer to update only required pieces

Re: portmaster best practices

2012-01-23 Thread ill...@gmail.com
On 23 January 2012 05:32, Victor Sudakov v...@mpeks.tomsk.su wrote: Hello portmaster users, If portaudit shows that some installed packages have vulnerabilities, what do you usually do? Do you upgrade only the vulnerable packages, or vulnerable packages and dependent packages (portmaster

Re: portmaster best practices

2012-01-23 Thread Roland Smith
On Mon, Jan 23, 2012 at 05:32:33PM +0700, Victor Sudakov wrote: Hello portmaster users, If portaudit shows that some installed packages have vulnerabilities, what do you usually do? It depends on the vulnerability and what the package does. I will de-install it if I think that the