Mailinglist Archive: opensuse (3653 mails)
| < Previous | Next > |
Security update monitoring
- From: Alexandr Malusek <Alexandr.Malusek@xxxxxxxxxx>
- Date: 24 Jun 2002 16:05:25 +0200
- Message-id: <86u1ns22my.fsf@xxxxxxxxxxxxxxxxx>
Hi,
I administer several machines running SuSE Linux in a large university
network and fix security holes according to SuSE security
announcements. The problem is that IT people responsible for network
security detect possible problems according to SW version
numbers. Apache-1.3.20-66 (SuSE 7.3) identifies itself as 1.3.20
which, they think, contains a security hole. For them, an OK version
is e.g. 1.3.26.
It would be nice if they could detect possible security problems
automatically without having a root or user access to these machines.
Otherwise we have to resolve each issue individually by e-mail which
is slow and takes time.
I'm thinking about a tool which could scan (in a secure way) a set of
machines and check that the latest security updates are installed.
Does it exist?
--
Alexandr.Malusek@xxxxxxxxxx
I administer several machines running SuSE Linux in a large university
network and fix security holes according to SuSE security
announcements. The problem is that IT people responsible for network
security detect possible problems according to SW version
numbers. Apache-1.3.20-66 (SuSE 7.3) identifies itself as 1.3.20
which, they think, contains a security hole. For them, an OK version
is e.g. 1.3.26.
It would be nice if they could detect possible security problems
automatically without having a root or user access to these machines.
Otherwise we have to resolve each issue individually by e-mail which
is slow and takes time.
I'm thinking about a tool which could scan (in a secure way) a set of
machines and check that the latest security updates are installed.
Does it exist?
--
Alexandr.Malusek@xxxxxxxxxx
| < Previous | Next > |