Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.security > #4615

Re: tailored security annoucements for Debian Stable

From Paul Wise <pabs@debian.org>
Newsgroups linux.debian.security
Subject Re: tailored security annoucements for Debian Stable
Date 2016-03-03 00:50 +0100
Message-ID <r8oGK-6PW-9@gated-at.bofh.it> (permalink)
References <r8h2y-18n-23@gated-at.bofh.it> <r8hcg-1c4-59@gated-at.bofh.it> <r8hYD-1Lj-47@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On Thu, Mar 3, 2016 at 12:38 AM, Jérôme Pinguet wrote:

> I already knew about unattended upgrades but they sound a bit too risky
> for production.
> apticron is not security oriented and, as far as i know, it needs lots
> of tweaking to limit itself to security updates.

apticron supports sending email without doing the upgrades.

> debsecan offers a daily email warning by default but I couldn't
> understand if it is sent at a fixed time or as soon as new security
> fixes get available...

Fixed time.

> I ended up adding an @hourly cron job with this command:
> debsecan --suite wheezy --only-fixed --format report --mailto
> my@email.com --update-history
>
> I wonder if I will be warned only once when new security fixes appear or
> on an hourly basis until I upgrade the server...

Hourly basis.

-- 
bye,
pabs

https://wiki.debian.org/PaulWise

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

tailored security annoucements for Debian Stable Jérôme Pinguet <jerome@jerome.cc> - 2016-03-02 16:40 +0100
  Re: tailored security annoucements for Debian Stable Andrew Deck <andrew.hastings.deck@gmail.com> - 2016-03-02 16:50 +0100
    Re: tailored security annoucements for Debian Stable Jérôme Pinguet <jerome@jerome.cc> - 2016-03-02 17:40 +0100
      Re: tailored security annoucements for Debian Stable Paul Wise <pabs@debian.org> - 2016-03-03 00:50 +0100
  Re: [listes] tailored security annoucements for Debian Stable François Blondel <frablondel@free.fr> - 2016-03-02 17:10 +0100

csiph-web