Re: [gentoo-dev] Server / security thing

[Evan Read]

> Hi
>
> Would it be good idea to make additional cammand "emerge security" to
> check and upgrade any security things like now "emerge system" upgrades
> some standard system things?

Well, # emerge world should update everything you have to the latest, and
therefore security fixed, ebuilds.

To have emerge check for the security of a system would be a lot of work. 
Better to use third party tools like nessus
(http://www.gentoo.org/packages/net-analyzer/nessus.html).

> This would definetly be good for people who maintain servers or for
> people who maintain workstations or this would just be *good* for
> people.

I think that having a "stable" set of packages which represents a released
version + fixes would be good for those people.  Managing security cant
be that automatic.

Thanks.

Evan.