• installazione nuovi pacchetti a partire dai sorgenti;
• controllo vulnerabilità e aggiornamento pacchetti;
• configurazione, compilazione e installazione di un nuovo kernel (nucleo del SO).
  

# cd /usr/pkgsrc/mail/postfix
# make && make install
# make clean

# ls /etc/rc.conf.d/
postfix
# cat /etc/rc.conf.d/postfix
required_files='/usr/pkg/etc/postfix/main.cf'
start_cmd='/usr/pkg/sbin/postfix start'
stop_cmd='/usr/pkg/sbin/postfix stop'
reload_cmd='/usr/pkg/sbin/postfix reload'

# cp /usr/pkg/share/examples/rc.d/cyrus /etc/rc.d/
# cp /usr/pkg/share/examples/rc.d/thttpd /etc/rc.d/

# /etc/rc.d/cyrus start
Dec  8 11:16:20 posta root: /etc/rc.d/cyrus: WARNING: $cyrus is not set properly - see rc.conf(5).
/etc/rc.d/cyrus: WARNING: $cyrus is not set properly - see rc.conf(5).

# /etc/rc.d/cyrus start
Dec  8 11:13:06 posta ctl_cyrusdb[11734]: recovering cyrus databases
Dec  8 11:13:06 posta ctl_cyrusdb[11734]: skiplist: recovered /var/imap/mailboxes.db (0 records, 144 bytes) in 0 seconds
Dec  8 11:13:06 posta ctl_cyrusdb[11734]: skiplist: recovered /var/imap/annotations.db (0 records, 144 bytes) in 0 seconds
Dec  8 11:13:06 posta ctl_cyrusdb[11734]: done recovering cyrus databases
Dec  8 11:13:06 posta master[13753]: ready for work
Dec  8 11:13:06 posta ctl_cyrusdb[13631]: checkpointing cyrus databases
Dec  8 11:13:10 posta ctl_cyrusdb[13631]: done checkpointing cyrus databases

# ps uww -p $(cat /var/run/cyrus-master.pid)
USER    PID %CPU %MEM VSZ  RSS TT STAT STARTED    TIME COMMAND
cyrus 20320  0.0  0.4 172 1108 ?? Ss   11:16AM 0:00.38 /usr/pkg/cyrus/bin/master -d

# cyradm --user cyrus posta
IMAP Password:
              Login failed: generic failure at /usr/pkg/lib/perl5/vendor_perl/5.8.0/sparc-netbsd-thread-multi/Cyrus/IMAP/Admin.pm line 118
cyradm: cannot authenticate to server with  as cyrus

Dec  8 13:05:16 posta perl: No worthy mechs found
Dec  8 13:05:16 posta perl: No worthy mechs found
Dec  8 13:05:32 posta imap[18547]: cannot connect to saslauthd server: No such file or directory
Dec  8 13:05:32 posta imap[18547]: cannot connect to saslauthd server: No such file or directory
Dec  8 13:05:32 posta imap[18547]: badlogin: posta.localdomain [192.168.110.1] plaintext cyrus SASL(-1): generic failure: checkpass failed

# cd /usr/pkgsrc/security/cyrus-saslauthd
# make && make install ; make clean
# cp /usr/pkg/share/examples/rc.d/saslauthd /etc/rc.d/saslauthd
# /etc/rc.d/saslauthd start
Dec  8 13:08:43 posta root: /etc/rc.d/saslauthd: WARNING: $saslauthd is not set properly - see rc.conf(5).
/etc/rc.d/saslauthd: WARNING: $saslauthd is not set properly - see rc.conf(5).

# /etc/rc.d/saslauthd start
Starting saslauthd.

# ps uww -p $(cat /var/run/saslauthd/saslauthd.pid)
USER   PID %CPU %MEM VSZ RSS TT STAT STARTED    TIME COMMAND
root 25842  0.0  0.3  80 904 ?? Is    1:10PM 0:00.09 /usr/pkg/sbin/saslauthd -a getpwent

# cyradm --user cyrus posta.
IMAP Password:
              posta.localdomain>

Dec  8 13:13:54 posta imap[29615]: login: posta.localdomain [192.168.110.1] cyrus plaintext User logged in

# cyradm --user cyrus posta.localdomain
IMAP Password:
              posta.localdomain> listmailbox
posta.localdomain> createmailbox user.antonio
posta.localdomain> listmailbox
user.antonio (\HasNoChildren)
posta.localdomain> createmailbox user.antonio.Sent
posta.localdomain> createmailbox user.antonio.Trash
posta.localdomain> listmailbox
user.antonio (\HasChildren)          user.antonio.Trash (\HasNoChildren)
user.antonio.Sent (\HasNoChildren)
posta.localdomain>

# /usr/pkg/sbin/download-vulnerability-list
Trying 2001:4f8:4:7:2e0:81ff:fe21:6563...
ftp: connect to address 2001:4f8:4:7:2e0:81ff:fe21:6563: No route to host
Trying 204.152.190.13...
Connected to ftp.NetBSD.org.
220 ftp.NetBSD.org FTP server (NetBSD-ftpd 20040809) ready.
331 Guest login ok, type your name as password.
230-
    The NetBSD Project FTP Server located in Redwood City, CA, USA
    100 Mbps connectivity courtesy of                      ,        ,
    The Internet Systems Consortium           WELCOME!    /(        )`
                                                          \ \___   / |
    +--- Currently Supported Platforms ----+              /- _  `-/  '
    |  acorn[26,32], algor, alpha, amd64,  |             (/\/ \ \   /\
    |   amiga[,ppc], arc, atari, bebox,    |  Release:   / /   | `    \
    |   cats, cesfic, cobalt, dreamcast,   |  2.0        O O   ) /    |
    |      evb[arm,mips,ppc,sh3,sh5],      |             `-^--'`<     '
    | hp[300,700], hpc[arm,mips,sh], i386, |            (_.)  _  )   /
    |       ibmnws, iyonix, luna68k,       |              .___/`    /
    |     mac[m68k,ppc], mipsco, mmeye,    |               `-----' /
    |       mvme[m68k,ppc], netwinder      |  <----.     __ / __   \
    |       news[m68k,mips], next68k,      |  <----|====O)))==) \) /====
    |   ofppc, pc532, playstation2, pmax,  |  <----'    `--' `.__,' \
    |    pmppc, prep, sandpoint, sbmips,   |               |        |
    |      sgimips, shark, sparc[,64],     |               \       /
    |       sun[2,3], vax, x68k, xen       |          ______( (_  / \_____
    +--------------------------------------+        ,'  ,-----'   |       \
    See our website at http://www.NetBSD.org/       `--{__________)  (FL) \/
     We log all FTP transfers and commands.  
230-
    EXPORT NOTICE
   
    Please note that portions of this FTP site contain cryptographic
    software controlled under the Export Administration Regulations (EAR).
   
    None of this software may be downloaded or otherwise exported or
    re-exported into (or to a national or resident of) Cuba, Iraq, Libya,
    Sudan, North Korea, Iran, Syria or any other country to which the
    U.S. has embargoed goods.
   
    By downloading or using said software, you are agreeing to the
    foregoing and you are representing and warranting that you are not
    located in, under the control of, or a national or resident of any
    such country or on any such list.
230 Guest login ok, access restrictions apply.
Remote system type is UNIX.
Using binary mode to transfer files.
200 Type set to I.
250 CWD command successful.
250-
    EXPORT NOTICE
   
    Please note that portions of this FTP site contain cryptographic
    software controlled under the Export Administration Regulations (EAR).
   
    None of this software may be downloaded or otherwise exported or
    re-exported into (or to a national or resident of) Cuba, Iraq, Libya,
    Sudan, North Korea, Iran, Syria or any other country to which the
    U.S. has embargoed goods.
   
    By downloading or using said software, you are agreeing to the
    foregoing and you are representing and warranting that you are not
    located in, under the control of, or a national or resident of any
    such country or on any such list.
250-
    Please read the file README
      it was last modified on Fri Dec 10 11:41:38 2004 - 371 days ago
    Please read the file README.export-control
      it was last modified on Wed Jun  7 04:38:56 2000 - 2017 days ago
    Please read the file README.sup
      it was last modified on Tue Nov 15 03:35:05 2005 - 32 days ago
250 CWD command successful.
250 CWD command successful.
250 CWD command successful.
local: pkg-vulnerabilities.1238 remote: pkg-vulnerabilities 229 Entering Extended Passive Mode (|||60688|)
150 Opening BINARY mode data connection for 'pkg-vulnerabilities' (157746 bytes)
.
100% |*************************************|   154 KB   91.44 KB/s    00:00 ETA
226 Transfer complete.
157746 bytes received in 00:01 (91.36 KB/s)
221-
    Data traffic for this session was 157746 bytes in 1 file.
    Total traffic for this session was 162115 bytes in 1 transfer.
221 Thank you for using the FTP service on ftp.NetBSD.org.
Package vulnerabilities file has been updated

# /usr/pkg/sbin/audit-packages

Package python23-2.3.5nb2 has a 1427,buffer-overflow vulnerability, see http://secunia.com/advisories/16793/
Package wget-1.10 has a 1472,remote-code-execution vulnerability, see http://www.mail-archive.com/wget%40sunsite.dk/msg08300.html
Package lynx-2.8.5.2nb2 has a 1478,remote-users-shell vulnerability, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-3120
Package thttpd-2.25bnb3 has a 1538,insecure-temp-files vulnerability, see http://secunia.com/advisories/17454/

# export CVSROOT=:pserver:anoncvs@anoncvs.netbsd.org:/cvsroot
# cd /usr
# cvs login
(la password è: "anoncvs")
# cvs -d $CVSROOT update -PAd pkgsrc

root@posta ~# grep -ne ^\< -e ^\> -e ^= /usr/pkgsrc/mk/defaults/mk.conf
1:<<<<<<< mk.conf
4:=======
6:>>>>>>> 1.112
1696:<<<<<<< mk.conf
1701:=======
1706:>>>>>>> 1.112

root@posta ~># lintpkgsrc -i
Scanning Makefiles: .............Cannot locate 'Makefile.sparc' (from /usr/pkgsrc/emulators/suse91_base/Makefile): .include "Makefile.${MACHINE_ARCH}"
5498 packages
Version mismatch: 'audit-packages' 1.33 vs 1.37
Version mismatch: 'bind' 9.3.0pl1nb2 vs 9.3.1,8.4.6,4.9.11
Version mismatch: 'cyrus-sasl' 2.1.20 vs 2.1.20nb1
Version mismatch: 'gcc34' 3.4.3 vs 3.4.4
Version mismatch: 'libtool-base' 1.5.18nb1 vs 1.5.18nb3
Version mismatch: 'logrot' 1.6 vs 1.7
Version mismatch: 'minicom' 1.83.1nb2 vs 2.1
Version mismatch: 'perl' 5.8.6nb3 vs 5.8.6nb4
Version mismatch: 'pkg_install' 20050318 vs 20050607
Version mismatch: 'pkg_install' 20050318 vs 20050607
Version mismatch: 'pkglint' 4.15.1 vs 4.18

# for PACCHETTO in security/audit-packages net/bind9 security/cyrus-sasl devel/libtool-base pkgtools/pkg_install lang/gcc34 sysutils/logrot lang/perl58 pkgtools/pkglint
> do cd /usr/pkgsrc/$PACCHETTO ; make clean ; make update ; make clean
> done

# cat ~/bin/aggiorna.sh
#!/bin/sh
if test -d "$1"
then cd "$1"
     if test $? -eq 0
     then echo "Aggiornamento in corso del pacchetto \"$1\""
          make clean ; make update
          if test $? -ne 0
          then echo 'ERRORE nell'\''esecuzione di "make update"' >&2
          fi
          make clean
     else echo "ERRORE nel tentativo di eseguire \"cd $1\"" >&2
     fi
else echo "ERRORE: \"$1\" non e' una directory" >&2
fi

# for PACCHETTO in audit-packages bind cyrus-sasl gcc34 libtool-base logrot minicom perl pkg_install pkglint
do find /usr/pkgsrc -maxdepth 2 -type d -name "$PACCHETTO" -exec ~/bin/aggiorna.sh {} \;
done

# cd /
# tar -zxf $DIRECTORY/syssrc.tgz

$ cd /usr/src/sys/arch/sparc/conf
$ cp GENERIC MIO-NUCLEO
$ vi MIO-NUCLEO

$ /usr/sbin/config MIO-NUCLEO &&  cd ../compile/MIO-NUCLEO
Build directory is ../compile/MIO-NUCLEO
Don't forget to run "make depend"
$ make depend && make

[...]

building standard kern library
#    create  MIO-NUCLEO/.gdbinit
rm -f .gdbinit
echo "source ../../../../gdbscripts/bdump" >> .gdbinit
echo "source ../../../../gdbscripts/kdump" >> .gdbinit
echo "source ../../../../gdbscripts/msgbuf" >> .gdbinit
echo "source ../../../../gdbscripts/pgrpdump" >> .gdbinit
echo "source ../../../../gdbscripts/stats" >> .gdbinit
echo "source ../../../../gdbscripts/vchain" >> .gdbinit
echo "source ../../../../gdbscripts/vdump" >> .gdbinit
echo "source ../../../../gdbscripts/xps" >> .gdbinit
#    create  vers.c
sh ../../../../conf/newvers.sh
#   compile  MIO-NUCLEO/vers.o
cc  -O3 -pipe -mcpu=v8 -mno-fpu     -ffreestanding   -O2 -Werror -Wall -Wno-main
 -Wno-format-zero-length -Wpointer-arith -Wmissing-prototypes -Wstrict-prototypes
-Wno-sign-compare -fno-zero-initialized-in-bss  -I.  -I../../../../arch -I../.
./../.. -nostdinc  -DMAXUSERS=32 -D_KERNEL -D_KERNEL_OPT  -c vers.c
#      link  MIO-NUCLEO/netbsd
ld -n -T ../../../../arch/sparc/conf/kern.ldscript -Ttext F0004000 -e start -X -S
-o netbsd ${SYSTEM_OBJ} ${EXTRA_OBJ} vers.o
   text    data     bss     dec     hex filename
2281211   74796  310392 2666399  28af9f netbsd

$ ll netbsd /netbsd*
-rwxr-xr-x  1 root     wheel  2986606 Aug 21 22:44 /netbsd
-rwxr-xr-x  1 root     wheel  3579390 Dec  2  2004 /netbsd.old
-rwxr-xr-x  1 tecnico  wheel  2673787 Dec 17 11:41 netbsd

# mv /netbsd /netbsd.old
# mv /usr/src/sys/arch/sparc/compile/MIO-NUCLEO/netbsd /