Exclude Kernel Update

[derek.warner]

I currently use CENTOS 6.4 in a closed lab environment. I have attempted to use exclude=kernel* and exclude=kernel\* in the yum.conf and nothing seems to prevent a kernel update to 6.5. We would like to stay at 6.4 because we do not wish to have 2 versions out in the field to support at this time.

Is there a way to make a local repository of only those patches, RPMs, etc for 6.4?

Do the ISOs you can download of 6.4 stay current, meaning are those ISOs the most up to date with patches?

Really struggling to find a way to update our systems to the most updated version of 6.4.

Thanks in advance.

V/R

Derek

[gerald_clark]

6.5 is not a dfifferent version than 6.4. They are both version 6.
The most updated version of 6.4 is 6.5 ( 6.4 with newer security updates and bug fixes ).

[derek.warner]

Our internal engineering team does not wish to have 2 version/updates or .... I am sorry if I do not know the correct verbiage for the minor release..... Anyhow we do not wish to have 2 images of CENTOS running in the field. We have over 250 machines in the field and having a replication lab with 2 differing numbers of a release is a pain. We wish to stay at 6.4 and keep it updated.

If this is not possible, then I understand. However if someone knows the answer, I would be greatly appreciative.

[gerald_clark]

We wish to stay at 6.4 and keep it updated.

Make up your mind.
Do you wish to stay at 6.4, or keep it updated?

[derek.warner]

Ok.....OK....I hear ya. I will tell them if they wish to be current, then upgrade to 6.5.

V/R

[toracat]

By staying at a past point release (such as 6.4), you would not get security patches. This is a major concern. By some efforts, you could "stay" at 6.4 by applying security-related updates manually. This is relatively easy with Scientific Linux because they offer a repository that deals with security updates only (and their dependencies).

[derek.warner]

Since we are not connected to the net and the system is configured IAW DISA RHEL 6 STIG, I feel a little better. However I agree not patching to 6.5 is an issue.