Q&A
お聞きしたいこと
現在かかわっているプロジェクトにてkernelのセキュリティパッチを適応しようと考えているのですが、
テスト環境ではkernelのアップデートがあるが、本番環境では存在しない状態です（ただ脆弱性診断ツールを使用してみると、本番環境もkernelのアップデートを実施しないとならないとのこと）
こういった状況下で何から手をつけて調査していけばいいのかアドバイスいただけたら嬉しいです。
自分でやってみたことに関しては下にまとめます。
自分でやってみたこと
1.kernelのアップデートがあるか確認
- 本番
bash
1[hogehoge@prd ~]$ sudo yum check-update --security | grep kernel 2[hogehoge@prd ~]$
- テスト環境
bash
1[hogehoge@test ~]$ sudo yum check-update --security | grep kernel 2kernel.x86_64 2.6.32-696.13.2.el6 rhui-REGION-rhel-server-releases 3kernel-firmware.noarch 2.6.32-696.13.2.el6 rhui-REGION-rhel-server-releases 4kernel-headers.x86_64 2.6.32-696.13.2.el6 rhui-REGION-rhel-server-releases 5[hogehoge@test ~]$
2.yumリポジトリの差異確認
- 本番
bash
1[hogehoge@prd ~]$ sudo yum repolist all 2Loaded plugins: amazon-id, refresh-packagekit, rhui-lb, search-disabled-repos, 3 : security 4repo id repo name status 5epel Extra Packa enabled: 12,402 6epel-debuginfo Extra Packa disabled 7epel-source Extra Packa disabled 8epel-testing Extra Packa disabled 9epel-testing-debuginfo Extra Packa disabled 10epel-testing-source Extra Packa disabled 11rhel-source Red Hat Ent disabled 12rhel-source-beta Red Hat Ent disabled 13rhui-REGION-client-config-server-6 Red Hat Upd enabled: 8 14rhui-REGION-rhel-server-debug-rh-common Red Hat Ent disabled 15rhui-REGION-rhel-server-debug-rhscl Red Hat Ent disabled 16rhui-REGION-rhel-server-debug-supplementary Red Hat Ent disabled 17rhui-REGION-rhel-server-releases Red Hat Ent enabled: 19,082+702 18rhui-REGION-rhel-server-releases-optional Red Hat Ent disabled 19rhui-REGION-rhel-server-releases-optional-source Red Hat Ent disabled 20rhui-REGION-rhel-server-releases-source Red Hat Ent disabled 21rhui-REGION-rhel-server-rh-common Red Hat Ent enabled: 129 22rhui-REGION-rhel-server-rhscl Red Hat Ent disabled 23rhui-REGION-rhel-server-source-rh-common Red Hat Ent disabled 24rhui-REGION-rhel-server-source-rhscl Red Hat Ent disabled 25rhui-REGION-rhel-server-source-supplementary Red Hat Ent disabled 26rhui-REGION-rhel-server-supplementary Red Hat Ent disabled 27zabbix Zabbix Offi enabled: 158 28zabbix-non-supported Zabbix Offi enabled: 15 29repolist: 31,794 30
- テスト環境
bash
1[hogehoge@test ~]$ sudo yum repolist all 2Loaded plugins: amazon-id, refresh-packagekit, rhui-lb, search-disabled-repos, security 3repo id repo name status 4epel Extra Packages for Enterprise Linux 6 - x86_64 enabled: 12,402 5epel-debuginfo Extra Packages for Enterprise Linux 6 - x86_64 - Debug disabled 6epel-source Extra Packages for Enterprise Linux 6 - x86_64 - Source disabled 7epel-testing Extra Packages for Enterprise Linux 6 - Testing - x86_64 disabled 8epel-testing-debuginfo Extra Packages for Enterprise Linux 6 - Testing - x86_64 - Debug disabled 9epel-testing-source Extra Packages for Enterprise Linux 6 - Testing - x86_64 - Source disabled 10rhel-source Red Hat Enterprise Linux 6Server - x86_64 - Source disabled 11rhel-source-beta Red Hat Enterprise Linux 6Server Beta - x86_64 - Source disabled 12rhui-REGION-client-config-server-6 Red Hat Update Infrastructure 2.0 Client Configuration Server 6 enabled: 8 13rhui-REGION-rhel-server-debug-rh-common Red Hat Enterprise Linux Server 6 RH Common (Debug RPMs) disabled 14rhui-REGION-rhel-server-debug-rhscl Red Hat Enterprise Linux Server 6 RHSCL (Debug RPMs) disabled 15rhui-REGION-rhel-server-debug-supplementary Red Hat Enterprise Linux Server 6 Supplementary (Debug RPMs) disabled 16rhui-REGION-rhel-server-releases Red Hat Enterprise Linux Server 6 (RPMs) enabled: 19,784 17rhui-REGION-rhel-server-releases-optional Red Hat Enterprise Linux Server 6 Optional (RPMs) disabled 18rhui-REGION-rhel-server-releases-optional-source Red Hat Enterprise Linux Server 6 Optional (SRPMs) disabled 19rhui-REGION-rhel-server-releases-source Red Hat Enterprise Linux Server 6 (SRPMs) disabled 20rhui-REGION-rhel-server-rh-common Red Hat Enterprise Linux Server 6 RH Common (RPMs) enabled: 129 21rhui-REGION-rhel-server-rhscl Red Hat Enterprise Linux Server 6 RHSCL (RPMs) disabled 22rhui-REGION-rhel-server-source-rh-common Red Hat Enterprise Linux Server 6 RH Common (SRPMs) disabled 23rhui-REGION-rhel-server-source-rhscl Red Hat Enterprise Linux Server 6 RHSCL (SRPMs) disabled 24rhui-REGION-rhel-server-source-supplementary Red Hat Enterprise Linux Server 6 Supplementary (SRPMs) disabled 25rhui-REGION-rhel-server-supplementary Red Hat Enterprise Linux Server 6 Supplementary (RPMs) disabled 26zabbix Zabbix Official Repository - x86_64 enabled: 158 27zabbix-non-supported Zabbix Official Repository non-supported - x86_64 enabled: 15 28repolist: 32,496
微妙に見ているyumリポジトリが違うのか…？！
以上となります。
あなたの回答
tips
プレビュー
