Red Hat ENTERPRISE LINUX 5 - VIRTUAL SERVER ADMINISTRATION, Руководство по развертыванию

Страница: 626 / 848

Chapter 42. Security Overview
600
rpm -K /tmp/updates/*.rpm
For each package, if the GPG key verifies successfully, the command returns
gpg OK
. If it doesn't,
make sure you are using the correct Red Hat public key, as well as verifying the source of the content.
Packages that do not pass GPG verifications should not be installed, as they may have been altered
by a third party.
After verifying the GPG key and downloading all the packages associated with the errata report, install
the packages as root at a shell prompt.
42.5.1.4. Installing Signed Packages
Installation for most packages can be done safely (except kernel packages) by issuing the following
command:
rpm -Uvh /tmp/updates/*.rpm
For kernel packages use the following command:
rpm -ivh /tmp/updates/ <kernel-package>
Replace
<kernel-package>
in the previous example with the name of the kernel RPM.
Once the machine has been safely rebooted using the new kernel, the old kernel may be removed
using the following command:
rpm -e <old-kernel-package>
Replace
<old-kernel-package>
in the previous example with the name of the older kernel RPM.
Note
It is not a requirement that the old kernel be removed. The default boot loader, GRUB,
allows for multiple kernels to be installed, then chosen from a menu at boot time.
Important
Before installing any security errata, be sure to read any special instructions contained in
the errata report and execute them accordingly. Refer to
Section 42.5.1.5, “Applying the
Changes”
for general instructions about applying the changes made by an errata update.
42.5.1.5. Applying the Changes
After downloading and installing security errata via Red Hat Network or the Red Hat errata website,
it is important to halt usage of the older software and begin using the new software. How this is
done depends on the type of software that has been updated. The following list itemizes the general
categories of software and provides instructions for using the updated versions after a package
upgrade.