Fi Awọn abulẹ Aabo tabi Awọn imudojuiwọn sii Laifọwọyi lori CentOS ati RHEL

Ọkan ninu awọn iwulo to ṣe pataki ti eto Linux ni lati wa ni imudojuiwọn nigbagbogbo pẹlu awọn abulẹ aabo tuntun tabi awọn imudojuiwọn ti o wa fun pinpin ti o baamu.

Ninu nkan ti tẹlẹ, a ti ṣalaye bi o ṣe le tunto imudojuiwọn aabo aifọwọyi ni Debian/Ubuntu, ninu nkan yii a yoo ṣe alaye bi o ṣe le ṣeto ipinfunni CentOS/RHEL 7/6 rẹ lati ṣe imudojuiwọn aifọwọyi awọn idii aabo aabo nigbati o nilo.

Awọn pinpin Lainos miiran ni awọn idile kanna (Fedora tabi Laini Sayensi) le tunto bakanna.

Ṣe atunto Awọn imudojuiwọn Aabo Laifọwọyi lori Awọn ọna CentOS/RHEL

Lori CentOS/RHEL 7/6, iwọ yoo nilo lati fi sori ẹrọ package atẹle:

# yum update -y && yum install yum-cron -y

Lọgan ti fifi sori ẹrọ ba pari, ṣii /etc/yum/yum-cron.conf ki o wa awọn ila wọnyi - iwọ yoo ni lati rii daju pe awọn iye baamu awọn ti a ṣe akojọ nibi:

update_cmd = security
update_messages = yes
download_updates = yes
apply_updates = yes

Laini akọkọ tọka pe aṣẹ imudojuiwọn ti a ko tọju yoo jẹ:

# yum --security upgrade

lakoko ti awọn ila miiran jẹ ki awọn iwifunni ati igbasilẹ laifọwọyi ati fifi sori ẹrọ ti awọn iṣagbega aabo.

Awọn ila wọnyi tun nilo lati tọka pe awọn iwifunni yoo firanṣẹ nipasẹ imeeli lati [imeeli ti o ni aabo] si akọọlẹ kanna (lẹẹkansi, o le yan ọkan miiran ti o ba fẹ).

emit_via = email
email_from = [email 
email_to = root

Nipa aiyipada, a ti ṣatunṣe cron lati ṣe igbasilẹ ati fi sori ẹrọ gbogbo awọn imudojuiwọn lẹsẹkẹsẹ, ṣugbọn a le yi ihuwasi yii pada ni/ati be be/sysconfig/yum-cron faili atunto nipa ṣiṣatunṣe awọn ipele meji wọnyi si bẹẹni .

# Don't install, just check (valid: yes|no)
CHECK_ONLY=yes

# Don't install, just check and download (valid: yes|no)
# Implies CHECK_ONLY=yes (gotta check first to see what to download)
DOWNLOAD_ONLY=yes

Lati mu ifitonileti imeeli ranṣẹ pe nipa awọn imudojuiwọn package aabo, ṣeto paramita MAILTO si adirẹsi imeeli to wulo.

# by default MAILTO is unset, so crond mails the output by itself
# example:  MAILTO=root
[email 

Lakotan, bẹrẹ ati mu iṣẹ yum-cron ṣiṣẹ:

------------- On CentOS/RHEL 7 ------------- 
systemctl start yum-cron
systemctl enable yum-cron

------------- On CentOS/RHEL 6 -------------  
# service yum-cron start
# chkconfig --level 35 yum-cron on

Oriire! O ti ṣaṣeyọri ṣeto awọn iṣagbega ti a ko fiyesi lori CentOS/RHEL 7/6.

Ninu nkan yii a ti jiroro bi o ṣe le jẹ ki imudojuiwọn olupin rẹ nigbagbogbo pẹlu awọn abulẹ aabo tuntun tabi awọn imudojuiwọn. Ni afikun, o kọ bi o ṣe le tunto awọn iwifunni imeeli lati le jẹ ki o ni imudojuiwọn nigbati awọn abulẹ tuntun lo.

Ti o ba ni awọn ifiyesi nipa nkan yii? Ni ominira lati sọ akọsilẹ wa silẹ ni lilo fọọmu asọye ni isalẹ. A n reti lati gbọ lati ọdọ rẹ.