RE: [cobalt-security] Slightly off Topic- PKG files

["Peter Baldwin" <peterj@xxxxxxxxxxxxxx>]

..snip..
>Better yet, modify the script to send an email when the new patches are
>posted asking whether or not to install it..  That way you can go and do
>research about the PKG before it gets installed..
>
> -Jamie-

Yup... we're definitely from the school of "if it ain't broke, don't fix it"
:-)  One of the things that we would like to see is a clean "backout"
procedure for Cobalt patches.  If something goes wrong, it's should be easy
to go back to where you started

- All original config files should go in a backup directory
- The original RPMS should be *easily* available for a quick restore

As it stands now, we only feel comfortable delivering software updates to
/home/packages/ on our auto-managed Cobalts.  We would like to graduate to
an auto-patching solution ... at least for the serious security threats.

Cheers!
Peter.
_____________________________________________
Yo'... Vito - Cobalt server appliance manager
http://vito.pointclark.net