From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.43) id 1ECtlS-0004yk-2t for garchives@archives.gentoo.org; Wed, 07 Sep 2005 06:50:34 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.4/8.13.4) with SMTP id j876jWOE006619; Wed, 7 Sep 2005 06:45:32 GMT Received: from mail-ihug.icp-qv1-irony1.iinet.net.au (mail-iinet.icp-qv1-irony1.iinet.net.au [203.59.1.195]) by robin.gentoo.org (8.13.4/8.13.4) with ESMTP id j876jUYA008684 for ; Wed, 7 Sep 2005 06:45:31 GMT Received: from 203-59-166-20.dyn.iinet.net.au (HELO moriah.localdomain) ([203.59.166.20]) by mail-ihug.icp-qv1-irony1.iinet.net.au with ESMTP; 07 Sep 2005 14:48:18 +0800 Received: from localhost (localhost [127.0.0.1]) by moriah.localdomain (Postfix) with ESMTP id C53896F7D for ; Wed, 7 Sep 2005 14:48:16 +0800 (WST) Received: from moriah.localdomain ([127.0.0.1]) by localhost (moriah [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 32289-10 for ; Wed, 7 Sep 2005 14:48:10 +0800 (WST) Received: from localhost (localhost [127.0.0.1]) by moriah.localdomain (Postfix) with ESMTP id 941A36F6F for ; Wed, 7 Sep 2005 14:48:10 +0800 (WST) Subject: Re: [gentoo-server] prioritising security updates From: "W.Kenworthy" To: gentoo-server@lists.gentoo.org In-Reply-To: <200509062312.56131.michael@irey.org> References: <431CDE1C.1040809@catprosystems.com> <431DC6B8.6030608@munat.com> <431E0FDA.70805@lunatic.net.nz> <200509062312.56131.michael@irey.org> Content-Type: text/plain Date: Wed, 07 Sep 2005 14:48:08 +0800 Message-Id: <1126075689.8496.166.camel@localhost> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-server@gentoo.org Reply-to: gentoo-server@lists.gentoo.org Mime-Version: 1.0 X-Mailer: Evolution 2.2.3 Content-Transfer-Encoding: 7bit X-Virus-Scanned: amavisd-new at localdomain X-Archives-Salt: 8c222ba2-5e25-4dd1-80b1-9f40a249c20c X-Archives-Hash: a75cc91a1f41d73f055ee18a350915b9 or to reduce bandwidth try this as the crontab command: rsync --recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 rsync://rsync.gentoo.org/gentoo-portage/metadata/glsa/* /usr/portage/metadata/glsa/ ;glsa-check -n -l|grep "\[N" This syncs only the glsa metadata, and the cron email also shows updates that it has synced, but do not apply to your system. However, when you do a glsa -f package to apply the fix, you must first "emerge sync" to update the full tree. As glsa's that affect my systems are few and far between, there's quite a bandwidth saving. e.g., ___________________ ... MOTD brought to you by motd-o-matic, version 0.3 receiving file list ... done glsa-200509-03.xml timestamp.chk Number of files: 539 Number of files transferred: 2 Total file size: 1406439 bytes Total transferred file size: 2153 bytes Literal data: 2153 bytes Matched data: 0 bytes File list size: 8682 Total bytes written: 199 Total bytes read: 11353 wrote 199 bytes read 11353 bytes 2100.36 bytes/sec total size is 1406439 speedup is 121.75 WARNING: This tool is completely new and not very tested, so it should not be used on production systems. It's mainly a test tool for the new GLSA release and distribution system, it's functionality will later be merged into emerge and equery. Please read http://www.gentoo.org/proj/en/portage/glsa-integration.xml before using this tool AND before reporting a bug. [N] indicates that the system might be affected. ___________________ In the above case, a new glsa (glsa-200509-03) has been issued, but it doesnt apply. On my todo list is to filter and summarize so all I get is whats new, and what applies to me! BillK On Tue, 2005-09-06 at 23:12 -0700, Michael Irey wrote: > To make it easy I have added these 2 lines to my crontab > > 10 2 * * * /usr/bin/emerge --sync 2> /dev/null > > /root/tmp/daily-emerge-sync.txt > 50 2 * * * /usr/bin/glsa-check -ln 2> /dev/null | grep ' \[N\]' > > Then every morning I get an email if there are packages with vulnerabilities. > > I can decide manually the priority. Because I dont want apache updating > itself in the middle of the night... I do it manually, from my emailed list. > > > On Tuesday 06 September 2005 02:53 pm, Jeremy Brake wrote: > > Hey, > > > > Is there anything in Portage which will allow me to view security > > updates, seperate from general version updates? > > At the moment i have a 5am cron job which runs "emerge --sync && emerge > > -upvD world" , and i just glance at it as soon as I i sit down at my pc > > for the day. > > The problem here is that I cant tell if updates (eg, at the moment it > > wants to update openssh and apache2) are security patches, or just > > general version upgrades. > > > > I know i can use "system" instead of "world" and omit the -D option, but > > thats not targeting my issue exactly. Is there a way to see which > > updates are security patches, without having to manually trawl through > > webpages and changelogs? > > > > Jeremy -- gentoo-server@gentoo.org mailing list