Re: system auto security update over night

#1 (**permalink**) 02-18-2008, 08:38 AM

Steffen Wendzel wrote:
> : openbsd team work with security in mind.
> : automagically-download-patch-install-upgrade is NOT security. if you
> : have 1/2 systems, you do not need no automation. if you have a lot of,
> : you can waste a couple of minutes to install a build-my-binary patchbox.
> : this is insane, think about what will your boss do if your automagical
> : upgrade broke your mysql (like debian does). think about it a while.
>
> Think about what your boss will say if someone broke into some of your
> systems because of a leak in the daemon because he brake in a few hours
> after midnight. If your system had applied the patch at midnight (or so)
> the system would still run secure.

Think about what your boss will say if the patch came out an hour after
midnight and someone broke into your system 8 hours later (worktime
already). You scenario won't handle this, you always might be to late,
its the same as with those antivirus products.

Christian

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode