On 8/23/06, Juha Saarinen <[EMAIL PROTECTED]> wrote:
On 8/23/06, Nico Meijer <[EMAIL PROTECTED]> wrote:
> Set up another, non-production, box with 3.9 and build -stable on that.
<snip>
Seems a slightly cumbersome way to deal with security issues which may
be urgent, but perhaps that's just me?

Building -stable on a suitable host does not take too long, so I
suppose time constraints will not bite you too often.

Regarding your comment on the process being cumbersome: you use the
same update process as you do for your twice-yearly updates. In this
case, you do not even have to update your configuration in /etc.

I find the process rather easy and the process scales relatively well
to accommodate larger number of machines.

If you're working with a single machine, perhaps applying patches to
-release is easier than building -stable. I used to do so before I
obtained a build host. The OP will need a compiler for that, though.

An alternative may be binpatch (see the archives), but I haven't tried
that piece of software yet. IIRC, quite a few people are happy with
that, so it may be worth your while.

Cheers,

Rogier

--
If you don't know where you're going, any road will get you there.

Reply via email to