Unix Users Meeting

September 24, 2003

Connie Sieh

How to verify that yum or autorpm installed security errata

• Read your mail that was sent to root

  • Yum and autorpm send mail to root when upgrades are done

• How to determine manually if the security errata are installed

  • Get a listing of the errata rpms from the errata ftp server

    • ftp://linux.fnal.gov/linux/<version>/i386/updates/RedHat/RPMS/

      • where version is determined by the release number in /etc/redhat-release with the dots removed

        • so Fermi Linux Release 7.1.1 (Top) would be 711

  • For each rpm in the list check that it is installed

    • rpm -qi <rpmname>

      • Note that this is rpmname and not file name.

        • for example pine-4.44-19.71.0.i386.rpm you would be just pine

    • rpm -qi pine

• What to do if a errata is not installed

  • For yum

    • Have yum check for updates

      • yum list updates

    • have yum install updates

      • yum update

      • optionally yum update <rpm>

• You know there are updates but yum or autorpm does not find them

  • for YUM

    • verify that /etc/yum.conf is correct

      • verify that the baseurl areas exist and are for your version of Fermi Linux

    • verify that /etc/redhat-release is correct

      • verify that the version in one of the areas that we actually have on linux.fnal.gov

        • note the version is with the dots removed

        • Valid areas at the moment are

          • 711

          • 712

          • 71rolling

          • 731

          • 73rolling

          • 901

          • 90rolling

    • verify that you can ftp to linux.fnal.gov and linux1.fnal.gov

      • ftp to linux.fnal.gov:/linux/<version>/i386/updates/RedHat/RPMS/

  • for autorpm

    • upgrade to yum

      • autorpm does not have the ability to install new dependencies which can make a update fail

      • autorpm does not always handle ciircular depenencies correctly

  • manual

    • down load rpms from ftp errata area

      • ftp://linux.fnal.gov/linux/<version>/i386/updates/RedHat/RPMS/

    • rpm -Uv rpmfilename

For more info about each rpm see the RedHat Errata info

• http://www.redhat.com/apps/support/errata/