Re: Errata Branch
On Thu, Sep 02, 2004 at 10:39:04PM -0600, Paul Andrews wrote: I'm looking for some information on the Errata Branch for 4.10. I just re-installed my FreeBSD system and am now running 4.10-RELEASE. I want to make sure that I am running with the most-up-to-date security patches applied. Yes. All you need to do is cvsup to the head of the RELENG_4_10 branch, and compile and install using that code. I would like to know the steps necessary for appling the changes in RELENG_4_10. Also how can I tell if the security patchs and code fixes have been applied. Just using cvsup will get you all of the security and other fixes. That includes all of the patches included in the various security advisories issued by the FreeBSD project. To get a newly installed system up to the latest patch level, using cvsup and doing a complete buildworld cycle is your best bet. For any further Errata or Security Advisories, you can always do another buildworld cycle, or there will usually be instructions in the advisory on how to just recompile only the affected bits. If you go the whole 'buildworld' route each time, the uname(1) output will show the patchlevel of the system: currently that's 4.10-RELEASE-p2 after the release of FreeBSD-SA-04:13 on June 30th. Instructions on how to do a buildworld can be found in: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html and also be sure to read /usr/src/UPDATING after cvsup'ing to see if there are any special instructions. My stable-subfile: *default host=cvsup12.freebsd.org *default base=/usr *default prefix=/usr *default release=cvs tag=RELENG_4_10 *default delete use-rel-suffix src-all That looks fine to me. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK pgp9aSnpwQNq6.pgp Description: PGP signature
Re: Errata Branch
Matthew, Thanks for the information. You might have already answered this but I'm not 100% sure, once I have cvsup RELENG_4_10 do I need to buildworld just to get the errata branch installed or can I just do as: make buildkernel KERNCONF=GENERIC make installkernel KERNCONF=GENERIC or is it better to do make buildworld make buildkernel KERNCONF=GENERIC make installkernel KERNCONF=GENERIC reboot (signal user) mergemaster -p make installworld mergemaster reboot Also is it necessary to do the mergemater part of the buildworld process. Thanks again for the assistance. Paul Matthew Seaman wrote: On Thu, Sep 02, 2004 at 10:39:04PM -0600, Paul Andrews wrote: I'm looking for some information on the Errata Branch for 4.10. I just re-installed my FreeBSD system and am now running 4.10-RELEASE. I want to make sure that I am running with the most-up-to-date security patches applied. Yes. All you need to do is cvsup to the head of the RELENG_4_10 branch, and compile and install using that code. I would like to know the steps necessary for appling the changes in RELENG_4_10. Also how can I tell if the security patchs and code fixes have been applied. Just using cvsup will get you all of the security and other fixes. That includes all of the patches included in the various security advisories issued by the FreeBSD project. To get a newly installed system up to the latest patch level, using cvsup and doing a complete buildworld cycle is your best bet. For any further Errata or Security Advisories, you can always do another buildworld cycle, or there will usually be instructions in the advisory on how to just recompile only the affected bits. If you go the whole 'buildworld' route each time, the uname(1) output will show the patchlevel of the system: currently that's 4.10-RELEASE-p2 after the release of FreeBSD-SA-04:13 on June 30th. Instructions on how to do a buildworld can be found in: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html and also be sure to read /usr/src/UPDATING after cvsup'ing to see if there are any special instructions. My stable-subfile: *default host=cvsup12.freebsd.org *default base=/usr *default prefix=/usr *default release=cvs tag=RELENG_4_10 *default delete use-rel-suffix src-all That looks fine to me. Cheers, Matthew ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Errata Branch
Paul Andrews [EMAIL PROTECTED] wrote: Matthew, Thanks for the information. You might have already answered this but I'm not 100% sure, once I have cvsup RELENG_4_10 do I need to buildworld just to get the errata branch installed or can I just do as: make buildkernel KERNCONF=GENERIC make installkernel KERNCONF=GENERIC or is it better to do make buildworld make buildkernel KERNCONF=GENERIC make installkernel KERNCONF=GENERIC reboot (signal user) mergemaster -p make installworld mergemaster reboot Also is it necessary to do the mergemater part of the buildworld process. Do the entire process: world, kernel, mergemaster. If you have a good understanding of the patches required to fix the particular security issues you are trying to fix, it's possible to determine which of these steps can be skipped. However, if you're asking the question, it's probably best to do all three to ensure that you've got everything. Once you're caught up via this method, each additional security advisary will detail the steps required to patch the problem. It's also possible to simply cvsup, rebuild world, rebuild kernel, mergemaster and be confident that everything required was done, so if you're not sure you fully understand the steps outlined in a particular security advisary, you can always just go through the entire process to be sure. Thanks again for the assistance. Paul Matthew Seaman wrote: On Thu, Sep 02, 2004 at 10:39:04PM -0600, Paul Andrews wrote: I'm looking for some information on the Errata Branch for 4.10. I just re-installed my FreeBSD system and am now running 4.10-RELEASE. I want to make sure that I am running with the most-up-to-date security patches applied. Yes. All you need to do is cvsup to the head of the RELENG_4_10 branch, and compile and install using that code. I would like to know the steps necessary for appling the changes in RELENG_4_10. Also how can I tell if the security patchs and code fixes have been applied. Just using cvsup will get you all of the security and other fixes. That includes all of the patches included in the various security advisories issued by the FreeBSD project. To get a newly installed system up to the latest patch level, using cvsup and doing a complete buildworld cycle is your best bet. For any further Errata or Security Advisories, you can always do another buildworld cycle, or there will usually be instructions in the advisory on how to just recompile only the affected bits. If you go the whole 'buildworld' route each time, the uname(1) output will show the patchlevel of the system: currently that's 4.10-RELEASE-p2 after the release of FreeBSD-SA-04:13 on June 30th. Instructions on how to do a buildworld can be found in: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html and also be sure to read /usr/src/UPDATING after cvsup'ing to see if there are any special instructions. My stable-subfile: *default host=cvsup12.freebsd.org *default base=/usr *default prefix=/usr *default release=cvs tag=RELENG_4_10 *default delete use-rel-suffix src-all That looks fine to me. Cheers, Matthew ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] -- Bill Moran Potential Technologies http://www.potentialtech.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Errata Branch
it was said: I'm looking for some information on the Errata Branch for 4.10. I just re-installed my FreeBSD system and am now running 4.10-RELEASE. I want to make sure that I am running with the most-up-to-date security patches applied. I would like to know the steps necessary for appling the changes in RELENG_4_10. Also how can I tell if the security patchs and code fixes have been applied. My stable-subfile: *default host=cvsup12.freebsd.org *default base=/usr *default prefix=/usr *default release=cvs tag=RELENG_4_10 *default delete use-rel-suffix src-all Hello, Your supfile is correct for what you want to do. If you read the faq at www.cvsup.org/faq.html (#11), however, you will see that on the _first_ cvsup, a slightly different method is recommended to ensure your checkouts file is correct. In your particular case, in place of tag=RELENG_4_10, you should have tag=RELENG_4_10_0_RELEASE list=cvs:RELENG_4_10. Then, when that finishes, change the tag back to tag=RELENG_4_10 and delete the list= portion of the line. Then run cvsup again. Remember, you should do this only on the _first_ cvsup; all subsequent times, ignore this step. As for checking that you properly updated, after building and installing world and kernel, run uname -a. You should see 4.10-RELEASE-p2. If you do, the src patches are installed. (The p2 shows your patch level. Right now, for 4.10, it is p2.) Speaking of src patches, you have only src-all in your supfile. This means your ports, docs, and cvsroot will _not_ be updated. If you intend that, fine, just making sure you know. If not, add ports-all, docs-all, and cvsroot=all to your file. HTH, Stheg __ Do you Yahoo!? Yahoo! Mail Address AutoComplete - You start. We finish. http://promotions.yahoo.com/new_mail ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Errata Branch
It was said: Just so I have this correct: After I install 4.10-RELEASE, before I complete the first_cvsup my config file should look as follows: *default host=cvsup12.freebsd.org *default base=/usr *default prefix=/usr *default release=cvs tag=RELENG_4_10_0_RELEASE list=cvs:RELENG_4_10 *default delete use-rel-suffix src-all After I have completed the cvsup, I should change the config file to: *default host=cvsup12.freebsd.org *default base=/usr *default prefix=/usr *default release=cvs tag=RELENG_4_10 *default delete use-rel-suffix src-all Hello, Please keep the list in the loop. Someone else may have a more timely and/or better response. Yes, you are correct. According to cvsup's author, doing that ensures the checkouts file updates properly. He explains why the procedure is necessary in the faq. I don't remember the details, likewise with the cvsroot=all thing. I just remember he said it was good idea. HTH, Stheg ___ Do you Yahoo!? Win 1 of 4,000 free domain names from Yahoo! Enter now. http://promotions.yahoo.com/goldrush ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Errata Branch
Hello All, I'm looking for some information on the Errata Branch for 4.10. I just re-installed my FreeBSD system and am now running 4.10-RELEASE. I want to make sure that I am running with the most-up-to-date security patches applied. I would like to know the steps necessary for appling the changes in RELENG_4_10. Also how can I tell if the security patchs and code fixes have been applied. My stable-subfile: *default host=cvsup12.freebsd.org *default base=/usr *default prefix=/usr *default release=cvs tag=RELENG_4_10 *default delete use-rel-suffix src-all All assistance is very much appericated. Thanks in advance. Paul Andrews ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
