Fedora Security Process Model Question

[Chris Strzelczyk]

Thank you for the quick feedback.

You are right about the ports system.  I did not stat in my email
very clearly that I also meant upgrading system versions via cvsup.  
This
makes FreeBSD a great system for remote administration.  However, I find
Linux to have better applications support.  So I guess I am weighing 
the options.

-cs
On Mar 2, 2005, at 5:57 PM, Alexander Dalloz wrote:

> Am Mi, den 02.03.2005 schrieb Chris Strzelczyk um 22:49:
>
> Hello!
>
>> 1. What is the best/quickest way to get security updates for Fedora
>> Linux?  Although Redhat mentions to get errata
>> thourgh redhat.com I see nothing for Fedora on the redhat support 
>> page.
>
> Follow the announce list:
>
> http://www.redhat.com/mailman/listinfo/fedora-announce-list
>
>>   Is yum or up2date the only way to go?
>
> Yes, yum or up2date are the tools Fedora Core ships with to deal with
> package installs and (security) updates. I must confess I do not see
> what's your point of critics or doubts. Feel free to elaborate.
>
>> 2. Once Fedora goes to a new revision level (i.e. from core 3 to core
>> 4) when do the experts recommend we update Fedora
>> core 3?   I believe updates stop a few months after the new revision 
>> is
>> release.  Does this include security updates?
>
> Official updates stop coming by Red Hat for Fedora Core 3 when Fedora
> Core 5 Test 2 release comes out. So this is plenty of time. No need to
> hurry when a new stable release is out. For instance I still run Fedora
> Core 2 and enjoy getting the regular updates.
>
>> 3.  When upgrading a Core version up a level how painless/painful is
>> it?  FreeBSD makes upgrading through ports a walk in the
>> park I would just like to know what the real world thinks.
>
> The ports system does not update the base system. Though I am still
> relatively fresh with FreeBSD myself I am sure base system and ports 
> are
> 2 different things.
> How painless or more difficult a Fedora Core upgrade is depends on the
> level of customisation of the install. In the past many user have
> successfully upgraded - either by the supported way using the CD based
> upgrade method with Anaconda or going the unsupported way doing online
> upgrades running yum. As Fedora intends to be a distribution living at
> the front of top technologies - leading edge (not bleeding edge) - 
> there
> always may be more or less difficult hurdles to pass with a Core
> upgrade. Fro example take the change from kernel 2.4 to 2.6 with FC1 ->
> FC2 or using udev initially with FC3. Those kind of things can rise up
> difficulties doing an online upgrade.
> I suggest you wait some time with an online upgrade until there is a
> fair number of feedback by others, early birds. Doing a google search
> you will find that there are some howtos by people who did online
> upgrades from earlier releases. By following their hints and reading
> their experiences you should be able to bypass pitfalls and limit the
> risk to be urged to use the backup.
>
>> -cs
>
> Alexander
>
>
> -- 
> Alexander Dalloz | Enger, Germany | GPG http://pgp.mit.edu 0xB366A773
> legal statement: http://www.uni-x.org/legal.html
> Fedora Core 2 GNU/Linux on Athlon with kernel 2.6.10-1.14_FC2smp
> Serendipity 23:42:22 up 9 days, 10:51, load average: 0.30, 0.44, 0.36
> -- 
> fedora-list mailing list
> fedora-list at redhat.com
> To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list