[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Patch Installation
On (01/08/2004 12:21), Rodney Hopkins wrote:
> On (08/01/2004 13:10), Gerardo Santana Gómez Garrido wrote:
> >There's already an openbsdupdate.openbsd.org.mx ;)
> >and even a script to automate downloads from it a la windowsupdate.
> >
> >I faced the same problem some time ago and came to the conclusion
> >that binary patching is the best solution. As you could see in the list,
> >many of us do that, in different ways. Some people enjoy building
> >everything and making release just to patch a few files; some others
> >like me just build what is needed and make small packages (using
> >binpatch); the smarter ones just download the binary patches already
> >built from openbsdupdate.openbsd.org.mx :)
>
> Of course, as someone is going to point out, (Hey, I guess it's me!),
> downloading binaries that someone else has compiled is probably not
> the most secure thing in the world to do. There is always the danger
> of trojaned/backdoored binaries. It all depends on the level of
> trust you give to the person/organization compiling the binaries as
> well as how much you really want to end up trusting the box you're
> applying those binary patches to.
>
> Just more food for thought.
Well, the main idea behind binpatch is that YOU build your own binary patches
to apply them to the rest of your boxes. binpatch tries to make it easy to
fetch & apply patches, build only the components affected and pack only the
files that were modified as binary patches.
I publish mine because people have asked for them. They've helped me too when I
have to install a server/firewall in a company, since it's easier and faster to
get OpenBSD up to date fetching the binary patches from openbsdupdate and
rebooting.
Of course, as you well point out, there's always the danger of trojaned
patches. But the same is true for binary and source patches.
--
Gerardo Santana Gómez Garrido
http://www.openbsd.org.mx/~santana/
"Between people, as among nations, respect of each other's rights insures
the peace." -Don Benito Juárez