Re: Red Hat Network updates

From: Steve Bremer (steveb@nebcoinc.com)
Date: 02/28/03

  • Next message: Ali-Reza Anghaie: "Re: Red Hat Network updates" 
    From: "Steve Bremer" <steveb@nebcoinc.com>
To: "Jennifer Fountain" <JFountain@rbinc.com>
Date: Fri, 28 Feb 2003 12:38:16 -0600

    Hi Jennifer,
            RHN is quite a nice tool. Because of it's design, it really is
    quite secure. By default, the connection is encrypted and it verifies
    the signatures on packages that it downloads. Also, because the
    RHN daemon checks in with RHN rather than listening on a port,
    there isn't a new service on your box that someone could try to
    connect to and exploit.
            However, for a security critical hosts (and maybe others), I
    would recommend against having your machine automatically apply
    updates. My personal preference is to review updates rather than
    having them automatically applied to my machines. This also gives
    me the chance to test the update first on a non-critical machine.

    Just my .02
    Steve Bremer
    NEBCO, Inc.

    Relevant Pages

    • Re: Red Hat Network updates
      ... > the signatures on packages that it downloads. ... > RHN daemon checks in with RHN rather than listening on a port, ... My personal preference is to review updates rather than ...
      (Focus-Linux)
    • Re: /var/lib/YaST2/you/i386/update
      ... |I right in assuming that this is the place YOU downloads its package ... |updates, and saves them when I forget to check the delete packages after ... Does that mean that I can delete the packages in this area? ... Yes, but you should only delete the RPM files, not the metadata files, ...
      (alt.os.linux.suse)
    • RE: up2date
      ... >to get the list of updates available. ... computer will tell RHN exactly what packages are installed so that you get ... notified of all applicable downloads. ... Rodolfo J. Paiz ...
      (RedHat)
    • Re: Not a problem, but feature request idea.
      ... it tells you how many updates there are to your system, ... select the option in the gnome menu to get the updates, it downloads ... looks at the packages that you have installed and tells you if any have ... to satisfy the installation. ...
      (Fedora)
    • /var/lib/YaST2/you/i386/update
      ... Hello all...I was just wondering about this directory, and its sub-dirs. ... I right in assuming that this is the place YOU downloads its package ... updates, and saves them when I forget to check the delete packages after ... Does that mean that I can delete the packages in this area? ...
      (alt.os.linux.suse)