“UbuntuHelp:AutomaticSecurityUpdates”的版本间的差异
来自Ubuntu中文
小 |
小 |
||
第67行: | 第67行: | ||
This will rotate the log file every week (`weekly`), or if it's over 250kB in size (`size 250k`), compressing old versions (`compress`). The previous two log files will be kept (`rotate 2`), and no rotation will occur if the file is empty (`notifempty`). | This will rotate the log file every week (`weekly`), or if it's over 250kB in size (`size 250k`), compressing old versions (`compress`). The previous two log files will be kept (`rotate 2`), and no rotation will occur if the file is empty (`notifempty`). | ||
==== Using cron-apt to handle automatic updating ==== | ==== Using cron-apt to handle automatic updating ==== | ||
− | Updating can be also done automatically by using package called | + | Updating can be also done automatically by using package called [http://packages.ubuntu.com/feisty/admin/cron-apt cron-apt]. Please read man page before doing anything. |
---- | ---- | ||
[[category:CategorySecurity]] | [[category:CategorySecurity]] | ||
[[category:UbuntuHelp]] | [[category:UbuntuHelp]] |
2008年10月19日 (日) 14:20的版本
- title Automatic Security Updates
目录
Introduction
This is a simple tutorial that will teach you to create a script and a cron job to go out and automatically install security updates without requiring you to do anything. There are always some security risks involved in running software upgrades without supervision, but there are also benefits. If you believe it's important to stay up to date with the latest security patches, then you should follow this simple tutorial.
Using apt.conf.d
If you are using GNOME: go to the "System" menu, then "Administration", then "Software Sources". Open up the "Updates" tab and select "Automatic updates", also select "Install security updates without confirmation". Alternately this may be done via the command line; simply change your /etc/apt/apt.conf.d/10periodic to:
APT::Periodic::Update-Package-Lists "1"; APT::Periodic::Download-Upgradeable-Packages "1"; APT::Periodic::AutocleanInterval "0"; APT::Periodic::Unattended-Upgrade "1";
And /etc/apt/apt.conf.d/50unattended-upgrades:
// Automaticall upgrade packages from these (origin, archive) pairs Unattended-Upgrade::Allowed-Origins { "Ubuntu hardy-security"; // "Ubuntu hardy-updates"; };
Using cron
Instructions
To begin, press Alt+F2 and create a new file:
gksudo gedit /etc/cron.weekly/apt-security-updates
If you're using KDE, use this command instead:
kdesudo kate /etc/cron.weekly/apt-security-updates
Copy the following text into this new file, save, and exit:
#! /bin/sh echo "**************" >> /var/log/apt-security-updates date >> /var/log/apt-security-updates aptitude update >> /var/log/apt-security-updates aptitude upgrade -o Aptitude::Delete-Unused=false --assume-yes --target-release `lsb_release -cs`-security >> /var/log/apt-security-updates echo "Security updates (if any) installed"
Once you are complete, you want to make the file executable. So, via the terminal, type the following line:
sudo chmod +x /etc/cron.weekly/apt-security-updates
Post-Install Setup and Execution Information
This script will run once weekly and it installs all available packages from the security repository. It also generates a log in ~-/var/log/apt-security-updates-~ for later inspection in case something goes wrong. This script will output information to a log file, so to prevent this log file from getting too large we need to make sure it gets rotated out. To do this, we'll use the ~-logrotate-~ utility, which comes with Ubuntu. Press Alt+F2 and type this command:
gksudo gedit /etc/logrotate.d/apt-security-updates
For KDE, use this command instead:
kdesudo kate /etc/logrotate.d/apt-security-updates
Paste this into the editor, save, and exit:
/var/log/apt-security-updates { rotate 2 weekly size 250k compress notifempty }
This will rotate the log file every week (`weekly`), or if it's over 250kB in size (`size 250k`), compressing old versions (`compress`). The previous two log files will be kept (`rotate 2`), and no rotation will occur if the file is empty (`notifempty`).
Using cron-apt to handle automatic updating
Updating can be also done automatically by using package called cron-apt. Please read man page before doing anything.