From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1NGoRV-0003YY-Uf for garchives@archives.gentoo.org; Sat, 05 Dec 2009 06:48:34 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 1C2F1E06F4; Sat, 5 Dec 2009 06:47:18 +0000 (UTC) Received: from mail-gx0-f224.google.com (mail-gx0-f224.google.com [209.85.217.224]) by pigeon.gentoo.org (Postfix) with ESMTP id EACB5E06F4 for ; Sat, 5 Dec 2009 06:47:17 +0000 (UTC) Received: by gxk24 with SMTP id 24so2495536gxk.6 for ; Fri, 04 Dec 2009 22:47:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from :user-agent:mime-version:to:subject:references:in-reply-to :content-type:content-transfer-encoding; bh=99LGsHFxHyTzkuAI+8nSpIIMeDA0UDNLLZYtEeImd88=; b=a4uZ6GmrJfOzS4psMQdFKBwbDoVDfVGM6x1j5VXwM5Pr+SJLYTLB4U+HXqoTRe3wTD /Q49/+m7+SG+svqJZZwrQC5G6hy+74IdnwGSR3wjkg74Fm5+IXjfoCI8JKfwVJVwO7qB QpS/dIrKGvCIrAFy4UAoCyVJhKz9lemDBspUw= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; b=Eu2J3fUTkxPs8+ZUSykYQv3Oq62a8YY+TXh584dzrYYRNn/BpIHFMgn2IHevEtgjfV O7qXMIpT7t0LrB4EBhL3MU1SIKEYZ2YuqlUGudqosLZu1Rw8dDOpLe3SO7g06qxS3qFH WB1naP4Y99VDR7WcG4E8knZHuPnbDyO+pLzgc= Received: by 10.151.1.2 with SMTP id d2mr7049225ybi.141.1259995636771; Fri, 04 Dec 2009 22:47:16 -0800 (PST) Received: from ?192.168.1.1? (adsl-0-94-29.jan.bellsouth.net [65.0.94.29]) by mx.google.com with ESMTPS id 15sm1947692gxk.4.2009.12.04.22.47.13 (version=SSLv3 cipher=RC4-MD5); Fri, 04 Dec 2009 22:47:15 -0800 (PST) Message-ID: <4B1A01EC.60402@gmail.com> Date: Sat, 05 Dec 2009 00:47:08 -0600 From: Dale User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.23) Gecko/20091201 SeaMonkey/1.1.18 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug References: <200912021251.54344.alan.mckinnon@gmail.com> <20091202144816.GA4798@ca.inter.net> <3ac129340912041502oac3e7d9o620a049b6141291@mail.gmail.com> <20091205051452.GB4840@ca.inter.net> In-Reply-To: <20091205051452.GB4840@ca.inter.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Archives-Salt: f5196d6a-70fc-4a62-ba81-5fe0ffa05b92 X-Archives-Hash: 133741d60fec7d4c972149e392e2e279 Philip Webb wrote: > The defective version of 'patch' had got into 'testing', > where the only remaining problems are supposed to be in the ebuild; > in fact in this case, there was still a serious problem upstream > & that version of 'patch' has been re-masked (I believe). > > Anyway, don't do testing on the machine you use for everyday computing. > If you want to get into testing, use a dedicated machine for it. > > It's late Friday, so let me stick my neck out again > (grins, sighs & gets another beer out of the fridge). > > At least once/month, if not once/week, someone reports on Gentoo User: > "I did an emerge sync, installed the latest blahblah-1.2.3, > did 'emerge world' & something dreadful has happened to my system". > > I've been using Gentoo for more than 6 years & it's never happened to me. > I believe the reason is that I follow my own advice as above: > I do install 'testing' versions of non-vital pkgs (eg 'eix') > & items which are well-supported upstream (eg KDE, kernel), > but I am very cautious about installing testing versions of system pkgs > whose collapse would do real damage to my everyday activities. > Even when stuff is well-supported upstream, I give it a few weeks > to see if there are reports anywhere of bad things happening. > > Eg I have not moved upto the testing 'eix-0.18.3', > because it requires that I replace 'lzma-utils' with 'xz-utils': > it's not worth the risk of doing real damage elsewhere > simply to get the latest version of 'eix', which is useful but non-essential. > When 'xz-utils' reaches 'stable' (and has a less frightening version number), > I will happily make the upgrade. > > Also, I never do a bald 'emerge world'. I look thro' the output of 'eix-sync', > write -- with a pencil+paper -- a list of installed pkgs which have changed, > run 'emerge -Dup world' to see what order of emerging is recommended, > then individually 'emerge -pv ' & -- if all looks well -- 'emerge '. > Yes, it takes a bit longer for my weekly update session (tomorrow Sat), > but I don't risk the nightmare of reducing my system to chaos > with all the extra frantic labor which would result. > > Again, I've been doing this for 6 years with Gentoo on 2 machines > & haven't run into any major setbacks. > > By all means, ignore my advice & do it your own ways (smile). > > I do somewhat similar to you. I just use the -a option instead and I don't write things down. I just do a emerge -uvDNa world and give it all a once over, USE flags, what gets updated and if I want it etc etc. I also run latest on eix, portage and some of its utils. I try to stay away from unstable system packages as it seems you do as well. I'm still on baselayout 1 and not planning on the openrc thingy yet either. May want to get ready tho, it is coming. I did my first install from a Gentoo 1.4 CD. That was quite a while ago. Dale :-) :-)