Hi All What kind of practice is followed, to apply the patches to production servers, development servers, hosted mainly on Linux.
Currently, we have mix of enterprise class Linux systems, scattered across multiple networks/locations. We have software repositories to get the patches, on the target box and apply them manually. I believe one should not apply the patches frequently on production servers, unless you really require them and recognise to fix a flaw. On security side, none of our boxes is directly connected to insecure network and there are separate firewall devices to take care of external threats. If suppose, i have a apache box running only web services, is it considered good to apply all available patches related to apache? Please share some information, how you manage production servers in terms of OS patches, frequency of applying them, how much old patches generally are applied? Regards, Yash _______________________________________________ ilugd mailinglist -- ilugd@lists.linux-delhi.org http://frodo.hserus.net/mailman/listinfo/ilugd Next Event: http://freed.in - September 28-29, 2007 Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi http://www.mail-archive.com/ilugd@lists.linux-delhi.org/
