UNSOLVED

nnagbhidkar

updated

17 years ago

0

870

January 11th, 2010 08:00

RHEL4 security updates

How to determine whether RHEL4 security updates have been applied and are at what level?

These needs to be determine on nearly 50 Avamar grids.

Thanks in advance

  • clevya

    117 Posts

    573

    1

    Posted January 11th, 2010 08:00

    Hi,

    You can use the script available here : ftp://avamar_ftp:anonymous@ftp.avamar.com/software/ugprep/check_for_rh_security_updates_rhel4_u6_20080905.tgz.sh

    This will determine if each individual security patch has been installed on a single node.

    This script will need to be run on all accelerator / utility and data nodes. You need to give the script executable permissions. With mapall commands, copy it across all nodes and execute it. Else you can run it individually on each node.

    The output will be simillar to this:

    bind-9.2.4-30.el4 not present

    bind-chroot-9.2.4-30.el4 not present

    bind-libs-9.2.4-30.el4 not present

    bind-libs-9.2.4-30.el4 not present

    bind-utils-9.2.4-30.el4 not present

    bluez-libs-2.10-3 not present

    bluez-libs-2.10-3 not present

    bluez-utils-2.10-2.4 not present

    Regards

    Adam

  • 573

    0

    Posted January 11th, 2010 08:00

    Install the Redhat updates on one grid so you have a system to compare all the others to.

    Then run "rpm -qa" on the Avamar nodes of the other grids which you aren't sure have been updated.  This will query all the packages.  You can use grep and compare the output and then install the updates on any nodes which aren't patched to the same level as the 'baseline' system

  • 573

    0

    Posted January 11th, 2010 09:00

    Thanks Adam.

    It seems that this utility is not the updated one. It is not reporting the acpid-1.0.3-2 package which is not current.

    So, whether this utility gets updated regularly and whether EMC is responsible to update this utility.