Skip to Content.
Sympa Menu

unclug - Re: [unclug] unclug Digest, Vol 54, Issue 8

unclug AT lists.ibiblio.org

Subject: UNC Linux Users Group

List archive

Chronological Thread  
  • From: "Glassman, Matthew S" <mglassmn AT email.unc.edu>
  • To: "<unclug AT lists.ibiblio.org>" <unclug AT lists.ibiblio.org>
  • Subject: Re: [unclug] unclug Digest, Vol 54, Issue 8
  • Date: Fri, 19 Apr 2013 16:13:31 +0000

Could those in the meeting that took better notes than I. List out the
Security Best Practices rules (11am meeting) and incorporate architecture and
logging softwares mentioned?

On Apr 19, 2013, at 12:02 PM, "unclug-request AT lists.ibiblio.org"
<unclug-request AT lists.ibiblio.org> wrote:

> Send unclug mailing list submissions to
> unclug AT lists.ibiblio.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://lists.ibiblio.org/mailman/listinfo/unclug
> or, via email, send a message with subject or body 'help' to
> unclug-request AT lists.ibiblio.org
>
> You can reach the person managing the list at
> unclug-owner AT lists.ibiblio.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of unclug digest..."
>
>
> Today's Topics:
>
> 1. cleaning up old kernels (Palmer)
> 2. Re: cleaning up old kernels (John W Sopko Jr)
> 3. Re: cleaning up old kernels (Palmer)
> 4. paging XenServer admins (Palmer)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Thu, 18 Apr 2013 18:41:12 +0000
> From: Palmer, Crist?bal <cmpalmer AT email.unc.edu>
> Subject: [unclug] cleaning up old kernels
> To: "unclug AT lists.ibiblio.org" <unclug AT lists.ibiblio.org>
> Message-ID:
> <0E497623818089449102E71CD4CF111027517B01 AT ITS-MSXMBS5M.ad.unc.edu>
> Content-Type: text/plain; charset="iso-8859-1"
>
> There was mention in the 11am meeting of Qualys complaining about old
> kernels. On RHEL 6 hosts with yum-utils, this will leave you with only the
> newest kernel:
>
> sudo package-cleanup --oldkernels --count=1
>
> Hat tip to D. Romani in Library Systems for that.
>
> Cheers,
> --
> Crist?bal Palmer
> Systems Administrator with Open Systems
> University of North Carolina at Chapel Hill
> 440 W. Franklin St. Chapel Hill, NC 27599-1150
>
>
>
> ------------------------------
>
> Message: 2
> Date: Thu, 18 Apr 2013 14:44:53 -0400
> From: John W Sopko Jr <sopko AT cs.unc.edu>
> Subject: Re: [unclug] cleaning up old kernels
> To: unclug AT lists.ibiblio.org
> Message-ID: <51703F25.90809 AT cs.unc.edu>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>
> We set this in /etc/yum.conf under the [main] section to keep only 2
> kernels, it defaults to 3, we like to keep the previous kernel in case
> we need to go back to it:
>
> installonly_limit = 2
>
> On 4/18/2013 2:41 PM, Palmer, Crist?bal wrote:
>> There was mention in the 11am meeting of Qualys complaining about old
>> kernels. On RHEL 6 hosts with yum-utils, this will leave you with only the
>> newest kernel:
>>
>> sudo package-cleanup --oldkernels --count=1
>>
>> Hat tip to D. Romani in Library Systems for that.
>>
>> Cheers,
>> --
>> Crist?bal Palmer
>> Systems Administrator with Open Systems
>> University of North Carolina at Chapel Hill
>> 440 W. Franklin St. Chapel Hill, NC 27599-1150
>>
>> _______________________________________________
>> unclug mailing list
>> unclug AT lists.ibiblio.org
>> We are dedicated to a harassment-free linux education and sharing
>> experience for everyone. Our anti-harassment policy can be found at:
>> http://lists.ibiblio.org/mailman/listinfo/unclug
>
> --
> John W. Sopko Jr. University of North Carolina
> email: sopko AT cs.unc.edu Computer Science Dept., CB 3175
> Phone: 919-962-1844 Fred Brooks Building; Room 140
> Fax: 919-962-1799 Chapel Hill, NC 27599-3175
>
>
> ------------------------------
>
> Message: 3
> Date: Thu, 18 Apr 2013 18:48:05 +0000
> From: Palmer, Crist?bal <cmpalmer AT email.unc.edu>
> Subject: Re: [unclug] cleaning up old kernels
> To: "unclug AT lists.ibiblio.org" <unclug AT lists.ibiblio.org>
> Message-ID:
> <0E497623818089449102E71CD4CF111027517BC9 AT ITS-MSXMBS5M.ad.unc.edu>
> Content-Type: text/plain; charset="Windows-1252"
>
> On Apr 18, 2013, at 2:44 PM, Todd Lewis <utoddl AT email.unc.edu> wrote:
>
>> Won't that leave you with an unbootable machine if the latest kernel is
>> borken? Seems rather risky to me, Qualys notwithstanding.
>
>
> Indeed. You'd only want to do this after having confirmed that the new
> kernel does not break things. Whether you have a dev/test env where you
> figure that out, lag by a couple of weeks before doing that, etc. etc?.
>
> Cheers,
> --
> Crist?bal Palmer
> Systems Administrator with Open Systems
> University of North Carolina at Chapel Hill
> 440 W. Franklin St. Chapel Hill, NC 27599-1150
>
>
>
> ------------------------------
>
> Message: 4
> Date: Thu, 18 Apr 2013 19:08:51 +0000
> From: Palmer, Crist?bal <cmpalmer AT email.unc.edu>
> Subject: [unclug] paging XenServer admins
> To: "unclug AT lists.ibiblio.org" <unclug AT lists.ibiblio.org>
> Message-ID:
> <0E497623818089449102E71CD4CF111027517D73 AT ITS-MSXMBS5M.ad.unc.edu>
> Content-Type: text/plain; charset="iso-8859-1"
>
> I failed to get contact info during the meeting. Would you ping me off-list
> if you use XenServer?
>
> Cheers,
> --
> Crist?bal Palmer
> Systems Administrator with Open Systems
> University of North Carolina at Chapel Hill
> 440 W. Franklin St. Chapel Hill, NC 27599-1150
>
>
>
> ------------------------------
>
> _______________________________________________
> unclug mailing list
> unclug AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/unclug
>
>
> End of unclug Digest, Vol 54, Issue 8
> *************************************




Archive powered by MHonArc 2.6.24.

Top of Page