patch management for Redhat

Hi ALL,

I would like to know if anyone has any experience building up a patch
management server for linux, as well as the patch process involved.

If i had several hundreds of linux boxes, consisting of a few standard
hardware platform (eg Dell PE1650, PE2650, PE4600) and different
distribution (eg. slackware, redhat 7.3, RH AS 3.0), how can i build
patches and apply on these different platform.

Currently, most of my critical servers are updated via Redhat Errata
RPMS upgrade. But for the rest of the servers (slackware / redhat
7.3), they are not. So whenever there is a vunlerbilty released, we
have to compile the sources separately on all machine.

Any help / advise render is deeply apprieciated !! Thanks !

Jem

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
NotDashEscaped: You need GnuPG to verify this message

In comp.os.linux.security Jeremy Tan <wisyki@gmail.com> suggested:
> Hi ALL,

> I would like to know if anyone has any experience building up a patch
> management server for linux, as well as the patch process involved.

> If i had several hundreds of linux boxes, consisting of a few standard
> hardware platform (eg Dell PE1650, PE2650, PE4600) and different
> distribution (eg. slackware, redhat 7.3, RH AS 3.0), how can i build
> patches and apply on these different platform.

'yum' does a great job on various RH version, build your own
custom RPMS on one/two system and put them in your yum repositories.

http://www.phy.duke.edu/~rgb/General...yum_HOWTO.html

--
Michael Heiming (GPG-Key ID: 0xEDD27B94)
mail: echo zvpunry@urvzvat.qr | perl -pe 'y/a-z/n-za-m/'
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBURoTAkPEju3Se5QRAntoAJ9ZpkFOQBlPtHGU8b7kv/BOWy+QtACfS1Oq
6ESQ43e9br+6ZZKXhJLITZY=
=sRW8
-----END PGP SIGNATURE-----

Jeremy Tan wrote:

> Currently, most of my critical servers are updated via Redhat Errata
> RPMS upgrade. But for the rest of the servers (slackware / redhat
> 7.3), they are not. So whenever there is a vunlerbilty released, we
> have to compile the sources separately on all machine.

Well, if you choose to use a deprecated,unsupported OS (in the case of
redhat 7.3), not having vendor-provided updates is a fact of life, and
you're stuck with rolling your own.

There is a glimmer of hope though:
www.fedoralegacy.org

-- Rex