--pf9I7BMVVzbSWLtt Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, Mar 27, 2004 at 06:15:08PM +0000, slimmy baddog wrote: > I am new to FreeBSD and i wanted to ask something since systems security = is=20 > what interests me the most. >=20 > Does freebsd have an automated update system like redhat has ? It's not quite like the way RedHat does things. Under FreeBSD, there is a clear distinction between the system and 3rd party packages/ports. You can use cvsup(1) to synchronise your copy of the system sources with the latest available from FreeBSD -- if you track the RELENG_4_9 branch the only changes you'll get are security patches. See the handbook for an explanation of how all this works: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/cvsup.html http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/cvs-tags.html If you want a binary update system, see: http://www.daemonology.net/freebsd-update/ This is still in development and hasn't received the official FreeBSD imprimatur quite yet (but surely it's only a matter of time). Install the security/freebsd-update port to get started with this. The ports tree is developed separately from the base system, and there's only the one branch that you can track via cvsup(1). Install portupgrade(1) for a useful tool to keep ports up to date. The security/portaudit port will get you a dynamically updated vulnerability database which will warn you of any problems with the port versions you have installed. =20 > Also where can i find a list with patches for all local - remote holes an= d=20 > bugs of FreeBSD 4.9 ? Start here: http://www.freebsd.org/security/ Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK --pf9I7BMVVzbSWLtt Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQFAZdP1dtESqEQa7a0RApFAAJ9OpJLsZdL5kQ9SzoAFPbM9IfMDUACfYrO5 F3izpWuXeXiLwyusytp50PQ= =YwJx -----END PGP SIGNATURE----- --pf9I7BMVVzbSWLtt--