Patching CentOS

Support for security such as Firewalls and securing linux
Post Reply
EL_Beginner
Posts: 13
Joined: 2015/02/06 23:30:32

Patching CentOS

Post by EL_Beginner » 2018/12/06 04:44:08

all,

Management doens't care for "I patched it" every 2 weeks. They are looking for reports with release dates, reboot times, severity etc from CentOS like the Windows guys have from wSUS.

So CentOS doesn't seem to have yum security options Redhat does. Is there a trick to this I am missing?

Alternatively I figure I can just CURL information about each RPM from the web and just look up data in Excel (and later Splunk) to get severity and release dates into the reports management wants. Unless there is an existing tool in CentOS for this?

Any help?

stevemowbray
Posts: 519
Joined: 2012/06/26 14:20:47

Re: Patching CentOS

Post by stevemowbray » 2018/12/06 10:59:10

Get management to pay for Red Hat subscriptions? :-)

EL_Beginner
Posts: 13
Joined: 2015/02/06 23:30:32

Re: Patching CentOS

Post by EL_Beginner » 2018/12/06 16:19:17

I am okay with that. They are not. Assumed there has to be some fancy tools for this somewhere...

User avatar
TrevorH
Site Admin
Posts: 33202
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Patching CentOS

Post by TrevorH » 2018/12/06 16:22:51

CentOS does not supply any security related metadata in its yum repositories to allow this to happen.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

EL_Beginner
Posts: 13
Joined: 2015/02/06 23:30:32

Re: Patching CentOS

Post by EL_Beginner » 2018/12/06 16:23:17

Thanks for replying TrevorH, any third party tools? Utilities?

User avatar
TrevorH
Site Admin
Posts: 33202
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Patching CentOS

Post by TrevorH » 2018/12/06 16:24:06

It's called RHEL.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

Post Reply