Hi,

Im trying to work out an update strategy four out Centos 6 / LAMP server (security updates).
yum update... updates but it updates to 6.0 -> 6.2 etc.. right? Feels kind of dangerous.

If I would run
yum update php*
yum update http*
yum update mysql*

This would take care of the “obvious” LAMP stuff and it feels like I still have an workable server if something goes wrong.. But would this mean that I’m using centos 6.2 updates in an Centos 6.0 installation?

How to you ppl secure your servers without breaking to much :)

I’m obviously new to this, all feedback is welcome :)

Best regards
Snoj

Use a test server to check the updates before they happen.

If you have lots of servers or are particularly concerned about breakage then set up your own yum repository mirroring the CentOS ones. Better still, set up 2 and update one from CentOS that you then apply to your test servers and when everything checks out OK, copy the updates to the second mirror and use that to update production.