This morning I came in to work to a bunch of emails that many if not all
of my CentOS 6 systems automatically updated openssl, ntpdate and openssh:
Dec 02 01:46:20 Updated: openssl-1.0.1e-15.el6.x86_64
Dec 02 01:46:20 Updated: ntpdate-4.2.6p5-1.el6.centos.x86_64
Dec 02 01:55:56 Updated: openssh-5.3p1-94.el6.x86_64
Dec 02 01:55:56 Updated: openssh-server-5.3p1-94.el6.x86_64
Dec 02 01:55:57 Updated: openssh-clients-5.3p1-94.el6.x86_64
What is really strange is that these systems cannot perform a "yum
update" because there are errors (deliberate for now):
--> Finished Dependency Resolution
Error: Package: cfengine-3.5.2-1.el6.x86_64 (@achieve3000-x86_64)
Requires: libtokyocabinet.so.8()(64bit)
Removing: tokyocabinet-1.4.33-6.el6.x86_64 (@base)
libtokyocabinet.so.8()(64bit)
Updated By: tokyocabinet-1.4.47-6.el6.x86_64
(achieve3000-x86_64)
Not found
You could try using --skip-broken to work around the problem
You could try running: rpm -Va --nofiles --nodigest
These systems started off as minimal installs, and I just installed what
we needed for each (they are appliances).
There is no (as far as I can tell) yum daemon running. Here is what is
in the crons:
[root@memcached11 etc]# ls cron*
cron.deny crontab
cron.d:
0hourly memcached_check raid-check setdate sysstat yumcleanall
cron.daily:
cups logrotate makewhatis.cron mlocate.cron prelink readahead.cron
tmpwatch
cron.hourly:
0anacron mcelog.cron
cron.monthly:
readahead-monthly.cron
cron.weekly:
[root@memcached11 etc]#
and here is what is in /etc/init (for upstart):
[root@memcached11 etc]# ls init
control-alt-delete.conf quit-plymouth.conf
readahead-collector.conf start-ttys.conf
init-system-dbus.conf rc.conf readahead.conf tty.conf
kexec-disable.conf rcS.conf readahead-disable-services.conf
plymouth-shutdown.conf rcS-emergency.conf serial.conf
prefdm.conf rcS-sulogin.conf splash-manager.conf
and finally, here is rc3.d:
[root@memcached11 etc]# ls rc3.d/S*
rc3.d/S01sysstat rc3.d/S13rpcbind rc3.d/S25cups
rc3.d/S55memcached rc3.d/S90crond
rc3.d/S02lvm2-monitor rc3.d/S14nfslock rc3.d/S25netfs
rc3.d/S55memcached11212 rc3.d/S91bacula-fd
rc3.d/S10network rc3.d/S15cf-monitord rc3.d/S26acpid
rc3.d/S55sshd rc3.d/S95atd
rc3.d/S11auditd rc3.d/S15mdmonitor rc3.d/S26haldaemon
rc3.d/S55zabbix_agentd rc3.d/S98cf-execd
rc3.d/S11portreserve rc3.d/S18rpcidmapd rc3.d/S26udev-post
rc3.d/S80postfix rc3.d/S98denyhosts
rc3.d/S12rsyslog rc3.d/S19rpcgssd rc3.d/S28autofs
rc3.d/S82abrt-ccpp rc3.d/S99local
rc3.d/S13cpuspeed rc3.d/S20kdump rc3.d/S30nfs rc3.d/S82abrtd
rc3.d/S13irqbalance rc3.d/S22messagebus rc3.d/S50mcelogd
rc3.d/S82abrt-oops
CentOS 5 uses a service: yum-updatesd, which doesn't exist in CentOS 6
(or at least, I don't see it on my systems)
So, my question is:
1. What process would have done this automatic update?
Thanks in advance
JBB
_______________________________________________
Discuss mailing list
[email protected]
https://lists.lopsa.org/cgi-bin/mailman/listinfo/discuss
This list provided by the League of Professional System Administrators
http://lopsa.org/
