Regularly update hosts - Githubissues

Liblor / applied_sec_lab

Applied Security Laboratory - AS19

6 stars 1 forks source link

Regularly update hosts #56

Open keyctl opened 4 years ago

keyctl commented 4 years ago

We should install security patches regularily, so admins do not have to check manually. This is common practice on Debian servers.

See the wiki for more information.

Liblor commented 4 years ago

Do you know whether apt supports excluding updates that change a certain file? I have to patch a bash script provided by galera in order to have proper TLS verification support ... So this file shouldn't be upgraded...

keyctl commented 4 years ago

Hm, I'm not sure. Maybe we can use apt's hold-feature for this?