Re: pkgng package repository tracking security updates

2013-01-15 Thread Lowell Gilbert
n j writes: > On Tue, Jan 15, 2013 at 10:13 AM, Matthew Seaman wrote: > >> On 14/01/2013 22:44, n j wrote: >> > One thing to think about would be the option of port maintainers >> uploading >> > the pre-compiled package of the updated port (or if the size of the >> upload >> > is an issue then ju

Re: pkgng package repository tracking security updates

2013-01-15 Thread n j
On Tue, Jan 15, 2013 at 10:13 AM, Matthew Seaman wrote: > On 14/01/2013 22:44, n j wrote: > > One thing to think about would be the option of port maintainers > uploading > > the pre-compiled package of the updated port (or if the size of the > upload > > is an issue then just the hash signature o

Re: pkgng package repository tracking security updates

2013-01-15 Thread Matthew Seaman
On 14/01/2013 22:44, n j wrote: > One thing to think about would be the option of port maintainers uploading > the pre-compiled package of the updated port (or if the size of the upload > is an issue then just the hash signature of the valid package archive so > other people with more bandwidth can

Re: pkgng package repository tracking security updates

2013-01-14 Thread n j
On Mon, Jan 14, 2013 at 3:43 PM, Matthew Seaman < m.sea...@infracaninophile.co.uk> wrote: > On 14/01/2013 14:36, n j wrote: > > The point of my question was exactly if it was possible to elaborate on > the > > "pre-compiled packages from FreeBSD official repositories" part. Would it > > be possibl

Re: pkgng package repository tracking security updates

2013-01-14 Thread Matthew Seaman
On 14/01/2013 14:36, n j wrote: > The point of my question was exactly if it was possible to elaborate on the > "pre-compiled packages from FreeBSD official repositories" part. Would it > be possible to have a (security-wise) up-to-date pre-compiled packages in > the official repositories? Note, I

Re: pkgng package repository tracking security updates

2013-01-14 Thread n j
On Mon, Jan 14, 2013 at 3:15 PM, Matthew Seaman wrote: > On 14/01/2013 13:10, Andrei Brezan wrote: > > I thing that it's good to wait for ports to compile and to be able to > > chose your configure options for the packages you install. It's good to > > know what options you need and what options

Re: pkgng package repository tracking security updates

2013-01-14 Thread n j
On Mon, Jan 14, 2013 at 2:10 PM, Andrei Brezan wrote: > On 1/14/2013 1:07 PM, n j wrote: > >> Hi, >> >> One of my primary concerns when managing a system is its security. In the >> interest of security, I usually hold to that "patch early, patch often". >> Ports are kept well up-to-date and with

Re: pkgng package repository tracking security updates

2013-01-14 Thread Matthew Seaman
On 14/01/2013 13:10, Andrei Brezan wrote: > I thing that it's good to wait for ports to compile and to be able to > chose your configure options for the packages you install. It's good to > know what options you need and what options you don't and why, that's > one of the reasons why i'm using Free

Re: pkgng package repository tracking security updates

2013-01-14 Thread Andrei Brezan
On 1/14/2013 1:07 PM, n j wrote: Hi, One of my primary concerns when managing a system is its security. In the interest of security, I usually hold to that "patch early, patch often". Ports are kept well up-to-date and with portmaster it is not a problem to keep updating the ports. However, as I

pkgng package repository tracking security updates

2013-01-14 Thread n j
Hi, One of my primary concerns when managing a system is its security. In the interest of security, I usually hold to that "patch early, patch often". Ports are kept well up-to-date and with portmaster it is not a problem to keep updating the ports. However, as Ivan [1] pointed out on his blog on