On Sun, Jan 19, 2003 at 10:07:34AM -0600, Mike Renfro wrote:
> On Sun, Jan 19, 2003 at 02:18:16PM +0100, Ivo Marino wrote:
>
> > I think using a cron-job like cron-apt for updating security related
> > packages automaticly on the servers not only could be a problem
> > considering the securtiy point of view but also this could corrupt a
> > server configuration and leave the system/service out of function.
>
> cron-apt's apparent default setting of only updating and downloading
> (not upgrading packages) should be pretty safe.
>
> > Anyone has allready written a script like the one described above or
> > maybe knows an allready existing application which could perform
> > this task? Thanks.
>
> Having not looked at dsh before, here's the one I worked up. I do have
> to make sure that PATH contains /sbin, /usr/sbin, etc. for an apt-get
> upgrade, but that's no big deal.
>
> =====
>
> #!/bin/sh
> FIREWALLS="fw1 fw2"
> SERVERS="srv1"
> WORKSTATIONS="wk1 wk2 wk3"
> XTERMS="xt1 xt2 xt3"
>
> case $1 in
> "-f") HOSTS=$FIREWALLS;;
> "-s") HOSTS=$SERVERS;;
> "-w") HOSTS=$WORKSTATIONS;;
> "-x") HOSTS=$XTERMS;;
> "-a") HOSTS="$FIREWALLS $SERVERS $WORKSTATIONS $XTERMS";;
> *) echo "Usage: $0 (-f|-s|-w|-x|-a) command"; exit 1;;
> esac
> shift
> for HOST in $HOSTS; do
> echo $HOST:
> /usr/bin/ssh $HOST ${1+"$@"}
> done
>
> =====Thanks for the code and the pointers, Mike. I consider it as a base concept for the script I'll eventually write, probably I'll use dsh, let's see. > -- > Mike Renfro / R&D Engineer, Center for Manufacturing Research, > 931 372-3601 / Tennessee Technological University -- [EMAIL PROTECTED] > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Ivo Marino [EMAIL PROTECTED] UN*X Developer, running Debian GNU/Linux irc.FreeNode.net #debian http://eimbox.org/~eim http://eimbox.org =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
pgpKg4XpZOPyS.pgp
Description: PGP signature
