security

1. FreeBSD Security Information

2. Unofficial FreeBSD Security Checklist / Links / Resources

3. I recomend use portaudit, portsnap, and freebsd-update. Two lines below (from /etc/crontab) will keep your FreeBSD box securely updates on it:

#Updating port tree and system src tree
1 5 * * * root /usr/sbin/portsnap cron
0 3 * * * root /usr/sbin/freebsd-update cron

Described cronjobs dont actually update, it only fetch newest ports-tree and bin-updates. Do portsnap extract for extract ports to /usr/ports, and freebsd-update install for installing new updates.

--
FreeBSDer

portupgrade

portupgrade working examples:
#grep 'portupgrade -o' /usr/ports/UPDATING
portupgrade -vrfo databases/mysql51-client mysql-client

(from own exp):
portupgrade -brOi pkg_name

interactive, recurcive, backup old pakages, Omit sanity checks for dependencies.

--
FreeBSDer