-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hemmann, Volker Armin wrote:
> 
> IT IS NOT RECOMMENDED!
> Read again!

http://www.gentoo.org/doc/en/handbook/handbook-x86.xml?part=2&chap=1 says:

> Since security updates also happen in packages you have not explicitly 
> installed on your system (but that are pulled in as dependencies of
> other programs), it is recommended to run this command once in a
> while.

Funny, I can quite clearly see the word "recommended".

> 
> You can catch the security updates by being on the gentoo-announce mailing 
> list. No need for --deep.
> 

Not every security update gets a GLSA on gentoo-announce. And then there
are the many non-security bugfixes in every new release of a program. So
if you just want to keep your system up-to-date you should use --deep. I
am not using Gentoo as long as you do, but in a good two years on
several machines I haven't had problems that I could trace back to the
usage of --deep. Sure, you get your part of ABI breakages, but hey,
that's the price you have to pay for using a source-based distro. And
you usually get a warning in form of an einfo...


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2-ecc0.1.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFElAtW6q4f+IV6B/wRAnByAJ4rRXMpx/iShQWNmLRoOPxqkuBK/ACdFSIz
17IT5up7F/cR3o5vLcPYnZk=
=t4ih
-----END PGP SIGNATURE-----
-- 
gentoo-user@gentoo.org mailing list

Reply via email to