What is in root's crontab? Also, look for the package yum-cron with it's associated config file at /etc/sysconfig/yum-cron.
Jared Moore On Mon, Dec 2, 2013 at 8:08 AM, Jonathan Bayer <[email protected]> wrote: > This morning I came in to work to a bunch of emails that many if not all of > my CentOS 6 systems automatically updated openssl, ntpdate and openssh: > > Dec 02 01:46:20 Updated: openssl-1.0.1e-15.el6.x86_64 > Dec 02 01:46:20 Updated: ntpdate-4.2.6p5-1.el6.centos.x86_64 > Dec 02 01:55:56 Updated: openssh-5.3p1-94.el6.x86_64 > Dec 02 01:55:56 Updated: openssh-server-5.3p1-94.el6.x86_64 > Dec 02 01:55:57 Updated: openssh-clients-5.3p1-94.el6.x86_64 > > > What is really strange is that these systems cannot perform a "yum update" > because there are errors (deliberate for now): > > --> Finished Dependency Resolution > Error: Package: cfengine-3.5.2-1.el6.x86_64 (@achieve3000-x86_64) > Requires: libtokyocabinet.so.8()(64bit) > Removing: tokyocabinet-1.4.33-6.el6.x86_64 (@base) > libtokyocabinet.so.8()(64bit) > Updated By: tokyocabinet-1.4.47-6.el6.x86_64 (achieve3000-x86_64) > Not found > You could try using --skip-broken to work around the problem > You could try running: rpm -Va --nofiles --nodigest > > > These systems started off as minimal installs, and I just installed what we > needed for each (they are appliances). > > There is no (as far as I can tell) yum daemon running. Here is what is in > the crons: > > [root@memcached11 etc]# ls cron* > cron.deny crontab > > cron.d: > 0hourly memcached_check raid-check setdate sysstat yumcleanall > > cron.daily: > cups logrotate makewhatis.cron mlocate.cron prelink readahead.cron > tmpwatch > > cron.hourly: > 0anacron mcelog.cron > > cron.monthly: > readahead-monthly.cron > > cron.weekly: > [root@memcached11 etc]# > > and here is what is in /etc/init (for upstart): > > [root@memcached11 etc]# ls init > control-alt-delete.conf quit-plymouth.conf readahead-collector.conf > start-ttys.conf > init-system-dbus.conf rc.conf readahead.conf > tty.conf > kexec-disable.conf rcS.conf readahead-disable-services.conf > plymouth-shutdown.conf rcS-emergency.conf serial.conf > prefdm.conf rcS-sulogin.conf splash-manager.conf > > and finally, here is rc3.d: > > [root@memcached11 etc]# ls rc3.d/S* > rc3.d/S01sysstat rc3.d/S13rpcbind rc3.d/S25cups > rc3.d/S55memcached rc3.d/S90crond > rc3.d/S02lvm2-monitor rc3.d/S14nfslock rc3.d/S25netfs > rc3.d/S55memcached11212 rc3.d/S91bacula-fd > rc3.d/S10network rc3.d/S15cf-monitord rc3.d/S26acpid > rc3.d/S55sshd rc3.d/S95atd > rc3.d/S11auditd rc3.d/S15mdmonitor rc3.d/S26haldaemon > rc3.d/S55zabbix_agentd rc3.d/S98cf-execd > rc3.d/S11portreserve rc3.d/S18rpcidmapd rc3.d/S26udev-post > rc3.d/S80postfix rc3.d/S98denyhosts > rc3.d/S12rsyslog rc3.d/S19rpcgssd rc3.d/S28autofs > rc3.d/S82abrt-ccpp rc3.d/S99local > rc3.d/S13cpuspeed rc3.d/S20kdump rc3.d/S30nfs > rc3.d/S82abrtd > rc3.d/S13irqbalance rc3.d/S22messagebus rc3.d/S50mcelogd > rc3.d/S82abrt-oops > > CentOS 5 uses a service: yum-updatesd, which doesn't exist in CentOS 6 (or > at least, I don't see it on my systems) > > So, my question is: > > 1. What process would have done this automatic update? > > Thanks in advance > > > JBB > > > _______________________________________________ > Discuss mailing list > [email protected] > https://lists.lopsa.org/cgi-bin/mailman/listinfo/discuss > This list provided by the League of Professional System Administrators > http://lopsa.org/ > _______________________________________________ Discuss mailing list [email protected] https://lists.lopsa.org/cgi-bin/mailman/listinfo/discuss This list provided by the League of Professional System Administrators http://lopsa.org/
