too late to change to security branch?

[Rakhesh Sasidharan]

> I run freebsd-update and my cvsup configuration uses "*default release=cvs
> tag=.".  I am actually following security branch, since I do not recompile
> the kernel, right?  This cvs tag only matters if I compile the kernel,
> right?

If you are using freebsd-update then you are following the security 
branch.

Even if you were using cvs and had to recompile the kernel (coz of some 
patch there) you would still be following the security branch (**if** you 
are tracking the security branch, that is).

In FreeBSD, the base system and the 3rd party apps are separate. The base 
system has the concept of branches. The 3rd party apps (ports) are shared 
amongst all, there's no concept of branches. So you can't just follow 
security updates for the 3rd party apps.

HTH,

 				- Rakhesh
                                 http://rakhesh.net/