Re: 3.4 CDs (a little OT)

[Rossam Souza Silva <rss@cin.ufpe.br>]

> Hi,
>
> My definition of upgrade is to replace with a newer version.  Example:
> Microsoft Windows Nt to Windows 2000.  I patch my windows systems all the
> time but I do not upgrade them.
> Maybe that is my problem, on the list upgrade means to fix existing issues
> not a true replacement.  If so then I have no worries.  I was just concerned
> with replacing the os every 6 months.
>
> Ron

Ok, now we have your definition of upgrade, so, you have two options:

1) Upgrade every 6 months... this gives you some work, sometimes you
cannot upgrade cleanly from sources and need a reinstall.

2) Upgrade every 12 months, in the meantime, apply the patchs.

I'm talking about the OpenBSD OS, with ports you have some work too.
Until we have a "portupgrade" for OpenBSD.

PS: I use OpenBSD in firewalls and DNS servers, with few ports
installed. A complete reinstall take me only 30 min. YMMV.

Rossam.

> -----Original Message-----
> From: Rossam Souza Silva [mailto:rss@cin.ufpe.br]
> Sent: Tuesday, September 16, 2003 3:13 PM
> To: Ron Nicholson
> Cc: misc@cvs.openbsd.org
> Subject: Re: 3.4 CDs (a little OT)
>
>
>
> Hi, Ron.
>
> Please, give me a name of an operating system that don't
> need upgrades (at least some kind of upgrade, i.e. some
> system component) in 12 months?
>
> Please, name it, it'll be perfect for everyone.
>
> Rossam.
>
> ------------------------------------------------------
> "Das Leben auf Erden ist ein gemeiner Krieg.
>  Wir spielen, wir kämpfen, wir setzen alles auf Sieg."
>
>  Megaherz
> ------------------------------------------------------
>
> On Tue, 16 Sep 2003, Ron Nicholson wrote:
>
> > If I am understanding part of the topic, OpenBSD is released twice a
> > year. If you want to be secure you should upgrade twice a year.  I
> > will assume that because it is supported for 12 months that there will
> > be security patches issued during that time.  I am trying to convince
> > my company to use OpenBSD in our DMZ.  I don't want to have to upgrade
> > every 6 months to be secure.  Now that said I understand that things
> > have to be patched and holes plugged all the time.  Just seems like a
> > lot of upgrading.  I have never upgraded OpenBSD, maybe it is real
> > simple, maybe not.
> >
> > If it is only supported for 12 months and I am right in my assumption,
> > this means that there will never be any patches or fixes for a version
> > that is older than 12 months.
> >
> > I guess my question is: Do I want to use OpenBSD to secure my company?
> >
> > Sorry to have rambled on but this topic has given me pause in my
> > decision to use OpenBSD.  I would just like some clarification.
> >
> > Thanks.
> >
> > Ron Nicholson
> > System Administrator
> > Dolese Bros. Co.
> > 405.297.8289
> > ronn@dolese.com