Patch Management

In Solaris and Red Hat

What is a Patch

A collection of fixes to a problemThree main categories:Security

Bugs in the system that provide unauthorized access (rlogin)

FunctionalityData integrity, reliability (cron)

PerformanceExcessive use of system resources

Patch Management

The process of determining if a system has the most appropriate software installed.

Where do patches come from?Operating System vendorsApplication distributors

Third party software

Patch Management

A three step process:DiscoveryDetermination Installation

Discovery

Online resources & Vendor toolsSolaris

SunSolve & NewslettersSolaris Patch Manager ToolSun Patch Check

Red HatRed Hat Network & Alert Notification ToolRPMRed Hat Update Agent

SunSolve

Red Hat Network

Determination

Comparing what is on your machine to what is availableLevel of importanceSolarisSolaris Patch Manager ToolPatch CheckPatchDiagSun Management Center

Determination (cont’d)

Solaris (cont’d)Solaris Live UpgradeSolaris Flash Technology

Red HatRed Hat Update AgentRed Hat NetworkRed Hat Network Alert Notification Tool

Installation

AutomatedSolaris: Solaris Patch Manager, Sun

Management Center, Solaris Live UpdateRed Hat: Red Hat Update Agent, Red Hat

Network, Red Hat Network Alert Notification Tool

ManualSolaris: patchaddRed Hat: rpm

PM Strategies

Patch Management ProcessDetermine which patches to installFind any patch dependenciesRemove old version of patch Install patch and dependencies

PM - Solaris

SolarisMonitor newsletters and website regularlyFour Types of patches:

Solaris UpdatesMaintenance UpdatesAlert PatchesAdvisory Patches

PM - Solaris

Three tiered approach: Install Solaris and Maintenance Updates Install Alert Patches Install patches on a per-issue basis

Patch Installation ProcessTest -> Development -> Production

AutomationSolaris Patch Manager Tool

PM – Red Hat

Red HatMonitor system status on Red Hat NetworkAdd channels as neededUtilize Red Hat Network Alert Notification

Tool

AutomationRed Hat Update Agent