D&C Lug - Home Page
Devon & Cornwall Linux Users' Group

[ Date Index ][ Thread Index ]
[ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] Which OS/Distro for secure production web server



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sunday 09 February 2003 10:53 am, kevin bailey wrote:
> and of course - these two commands can be put into a script file and run
> automatically every night using cron - if there are security alerts a
> patch usually gets released within 1/2 days.  i have read about alerts
> and then checked only to find that the patch has already been installed!

this can be very dangerous, especially on a server, where you want/need 100% 
uptime.

If mysql-server is being upgraded, it will stop mysql before reconfiguring all 
the other packages, then configure them, and *then* start mysql again.

if glibc is updated, you'll need to make sure all your services restart, which 
can cause problems, and problems if you don't.

all in all, an automaticd update + upgrade is *really* not reccommended - i'm 
sure there are a 100 other reasons why you should never automatically do it.

 ~ Theo

- -- 
Theo Zourzouvillys
<theo@xxxxxxxxxxxxxxxx>
<http://theo.me.uk/>




-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE+RlKa448CrwpTn6YRAmU2AJ9U3GMwxbGDD1xuPrOaMVcgv0NvvgCg4+kw
B2BwEIgEuiEIKaKuRCx+Jks=
=YbYz
-----END PGP SIGNATURE-----


--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe.


Lynx friendly