DaemonForums  

Go Back   DaemonForums > OpenBSD > OpenBSD Packages and Ports

OpenBSD Packages and Ports Installation and upgrading of packages and ports on OpenBSD.

Reply
 
Thread Tools Display Modes
  #1   (View Single Post)  
Old 24th March 2012
marconi marconi is offline
Port Guard
 
Join Date: Mar 2012
Posts: 10
Thanked 0 Times in 0 Posts
Wink stable ports

Hi,

Today i installed OpenBSD 5.0 and manually patched from errata page, and i have few questions.

Can system with this method of patching be secure enough like system with rebuilded kernel and binares from stable source? What do you prefer to do?

Can i now use stable ports tree, or i must to rebuild kernel and binares from stable source before that?

If i get stable source with cvs and rebuild kernel and binares, how to know or to check when he created a new stable?

Thanks!
Reply With Quote
  #2   (View Single Post)  
Old 24th March 2012
ocicat ocicat is offline
Administrator
 
Join Date: Apr 2008
Posts: 2,834
Thanked 190 Times in 160 Posts
Default

Quote:
Originally Posted by marconi View Post
Can system with this method of patching be secure enough like system with rebuilded kernel and binares from stable source?
Welcome!

The -stable branch may contain fixes which were not deemed important enough to warrant the creation of a patch for -release. In terms of an equation:

-stable >= -release + installing all published patches.
To say whether these additional fixes to the -stable branch have any security implications, I suspect they don't, but this is an opinion. If these fixes had security implications of worth, the developers would make them available as publicly available patches to -release too.
Quote:
Can i now use stable ports tree, or i must to rebuild kernel and binares from stable source before that?
Technically, there are no library differences between -release & -stable. Section 15.4.1 of the FAQ also states:

Because no intrusive changes are made in -stable, it is possible to use a -stable ports tree on a -release system, and vice versa. There is no need to update all your installed packages after applying a few errata patches to your system.
Quote:
If i get stable source with cvs and rebuild kernel and binares, how to know or to check when he created a new stable?
Watch the errata page for published patches. Also, track the -stable CVS branch & look for check-in's to this branch. The cvs(1) manpage will give you information on what CVS commands will be needed. Information on how to download the -stable branch can be found in Section 5.3.3 of the FAQ.

Last edited by ocicat; 25th March 2012 at 01:13 AM.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Firefox and -stable ports moosejaw OpenBSD Packages and Ports 3 1st November 2010 06:49 PM
return of the -stable ports tree ocicat OpenBSD Packages and Ports 3 24th October 2009 04:11 AM
STABLE ports tree has returned.. BSDfan666 OpenBSD Packages and Ports 2 26th July 2009 07:36 PM
Questions, Ports / current|stable ax0 OpenBSD Installation and Upgrading 42 16th April 2009 08:23 PM
ports: stable or current? schrodinger OpenBSD Packages and Ports 4 11th August 2008 01:18 PM


All times are GMT. The time now is 08:44 AM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick