How to set up your CentOS system to regularly update security patches

How to set up a CentOS system to regularly update security patches

As network security risks continue to increase, regularly updating the security patches of the operating system is essential to protect the security of servers and terminal devices. This article will introduce how to set up automatic and regular security patch updates on CentOS systems and provide corresponding code examples.

1. Using the yum-cron tool

The CentOS system provides a tool called yum-cron, which can help us automatically update system software packages and security patches. Use the following command to install the yum-cron tool:

sudo yum install yum-cron

After the installation is complete, use the following command to enable the yum-cron service:

sudo systemctl start yum-cron
sudo systemctl enable yum-cron

2. Configure the yum-cron service

The configuration file of the yum-cron service is located in /etc/yum/yum-cron.conf. Use the following command to edit the configuration file:

sudo vi /etc/yum/yum-cron.conf

In the configuration file, we need to modify the following parameters according to needs:

apply_updates = yes  # 启用自动更新
update_cmd = default  # 默认使用yum命令进行更新
random_sleep = 360  # 随机延迟时间（单位为秒）

After completing the modification, save and exit the configuration file.

3. Configuring the regular update time

The scheduled task configuration file of the yum-cron service is located at /etc/cron.daily/0yum-daily.cron. We can configure the periodic update time by editing this file.

Use the following command to edit the scheduled task configuration file:

sudo vi /etc/cron.daily/0yum-daily.cron

At the beginning of the file, we can see the following two lines:

#!/bin/bash
exec /usr/bin/yum --security -R 120 -e 0 -d 0 -y update

The -R parameter sets the yum command The timeout time (unit is minutes), the -e parameter indicates that the update operation is performed when the exit code is 0, and the -d parameter indicates that the debug mode is disabled.

We can modify these parameters as needed and set a regular update time that suits us. When you're done making changes, save and exit the file.

4. Manually update security patches

In addition to automatic regular updates, we can also manually update security patches at any time.

Use the following command to manually update packages and security patches:

sudo yum update --security

5. Monitor the update log

The yum-cron service will generate an update log, we can Monitor system updates by viewing the update log.

The update log is located in /var/log/yum.log. Use the following command to view the update log:

sudo less /var/log/yum.log

In the update log, we can learn the details of each updated package and security patch.

In this way, we have completed the operation of setting up automatic regular security patch updates on the CentOS system.

To sum up, regularly updating security patches is crucial to maintaining the security of servers and terminal devices. By using the yum-cron tool, we can easily implement the automatic update function. In addition, we can also manually update security patches at any time and understand the system updates by monitoring the update log.

I hope the methods provided in this article will be helpful to you in setting up regular security patch updates in your CentOS system!

Reference:

• https://access.redhat.com/solutions/10021

The above is the detailed content of How to set up your CentOS system to regularly update security patches. For more information, please follow other related articles on the PHP Chinese website!