Centos yum security updates

It would work on RHEL, however. The conservative approach when applying updates is to perform a system reboot, especially for security updates and indeed kernel updates.

Yes, indeed a reboot is vital. What about if the security update requires a system reboot to take effect. And if there any new kernel update available is that going to get updated automatically with this configuration. Have a question or suggestion? Please leave a comment to start the discussion. Please keep in mind that all comments are moderated and your email address will NOT be published.

Save my name, email, and website in this browser for the next time I comment. Notify me of followup comments via e-mail. You can also subscribe without commenting. This site uses Akismet to reduce spam. Learn how your comment data is processed. Recommended Read : dnf-automatic — Install Security Updates Automatically in CentOS 8 In this tutorial, you will learn how to use yum-cron to install and configure security updates automatically on your CentOS 7 system.

So what is Yum-Cron? If you liked this article, then do subscribe to email alerts for Linux tutorials. If you have any questions or doubts? Related Posts. Thanks Reply. Got something to say? Join the discussion. Cancel reply Have a question or suggestion?

Comment Name Email Save my name, email, and website in this browser for the next time I comment. As a first step, go to the ' yum' configuration directory and edit the ' yum-cron. Note : Of course, you can use any other editor of your choice. And for those who want to learn Vim, check out our comprehensive tutorial here.

For example, in this tutorial, we are focusing only on security updates, so change the value from 'default' to 'security'. So whenever there's a security update available, the system will now automatically download the required packages and then apply all the updates. Next up is message notification configuration. Basically, Yum-cron provides two ways: either you can have notifications displayed on STDIO, or have them sent to an email address. For this tutorial, we will be going with the second option, which is email.

There are a handful of other related changes that you have to do, including specifying from and to email addresses and email host.

Here're the values that we've set:. At this stage, any security updates on the system will be automatically downloaded and applied using yum-cron on daily basis. Sometimes, for whatever reason, we don't want to apply automatic updates on some packages, including kernel. In this step, we will discuss the configuration that'll let you disable updates for select packages.

So the first step here is to edit the configuration file yum-cron. Towards the bottom of the file, you will see the '[base]' section. Add the a new line under this section containing names of packages you want to exclude. For example, something similar to the following:. So in our case, all packages with names beginning with 'mysql' or 'kernel' will be disabled for automatic updates. The yum repos for Centos 7 does not provide the metadata required for yum security update. It won't install all the security packages.

These instructions are for a real RHEL server. For CentOS they do not apply as Nagarajan points out in previous comment. The crons under cron. Any additional changes after installed yum-cron will not effect crons behavior.