CentOS

all,

Management doens't care for "I patched it" every 2 weeks. They are looking for reports with release dates, reboot times, severity etc from CentOS like the Windows guys have from wSUS.

So CentOS doesn't seem to have yum security options Redhat does. Is there a trick to this I am missing?

Alternatively I figure I can just CURL information about each RPM from the web and just look up data in Excel (and later Splunk) to get severity and release dates into the reports management wants. Unless there is an existing tool in CentOS for this?

Any help?

Get management to pay for Red Hat subscriptions?

I am okay with that. They are not. Assumed there has to be some fancy tools for this somewhere...

CentOS does not supply any security related metadata in its yum repositories to allow this to happen.

Thanks for replying TrevorH, any third party tools? Utilities?

It's called RHEL.