john <lists.j...@gmail.com> writes: > deb http://security.debian.org/ etch/updates main contrib > deb-src http://security.debian.org/ etch/updates main contrib > > The recent key-change forced me to use the main stable repos to get > the new keys (e.g apt-get install debian-archive-keyring ) > . and got me thinking... > > Is the approach I outlined the "best" way to maintain the security and > stability of these box's or should I really be using the main > repositories as well?
We've never had any trouble using the main repositories as well. You get some additional more minor security bug fixes (DoS bugs, crashers, and similar things) that way, the amount of change isn't much higher, the stability for us has been fully as good as the security updates in practice, and periodically there are things like the archive key change that go into point releases that you want. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/> -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
