sabx score 169
2017/09/06 17:51 投稿
| CentOS7にて、セキュリティパッチの最新バージョンのみを抽出したい |
| ## タイトルの通りではありますが、、、 |
| AmazonLinuxだと下記コマンドで最新パッケージのみを抽出できたのですが、 |
| CentOS7だと、パッチ情報がすべて表示されてしまいます。 |
| ```bash |
| yum check-update --security |
| ``` |
| なにかうまいこと抽出する方法はありませんでしょうか？ |
| ## 実際に自分がやってみたこと |
| ### AmazonLinux |
| ```bash |
| [hoge-y@ip-xx-xx-xx-xx ~]$ sudo yum check-update |
| Loaded plugins: priorities, update-motd, upgrade-helper |
| amzn-main | 2.1 kB 00:00:00 |
| amzn-updates | 2.3 kB 00:00:00 |
| 2 packages excluded due to repository priority protections |
| authconfig.x86_64 6.2.8-30.31.amzn1 amzn-updates |
| aws-cfn-bootstrap.noarch 1.4-21.13.amzn1 amzn-updates |
| aws-cli.noarch 1.11.132-1.47.amzn1 amzn-updates |
| bash.x86_64 4.2.46-28.37.amzn1 amzn-updates |
| curl.x86_64 7.51.0-9.75.amzn1 amzn-updates |
| glibc.x86_64 2.17-196.172.amzn1 amzn-updates |
| glibc-common.x86_64 2.17-196.172.amzn1 amzn-updates |
| glibc-devel.x86_64 2.17-196.172.amzn1 amzn-updates |
| glibc-headers.x86_64 2.17-196.172.amzn1 amzn-updates |
| kernel.x86_64 4.9.43-17.38.amzn1 amzn-updates |
| libcurl.x86_64 7.51.0-9.75.amzn1 amzn-updates |
| python27-botocore.noarch 1.5.95-1.65.amzn1 amzn-updates |
| system-release.noarch 2017.03-0.1 amzn-updates |
| wget.x86_64 1.18-3.27.amzn1 amzn-updates |
| yum.noarch 3.4.3-150.70.amzn1 amzn-updates |
| [hoge-y@ip- |
| [hoge-y@ip-xx-xx-xx-xx ~]$ |
| ``` |
| 上記の出力だと、パッケージに対して最新バージョンのみが出力されているように見える（理想） |
| ### CentOS7 |
| ```bash |
| [hoge-y@ip-xx-xx-xx-xx ~]$ sudo yum check-update |
| Loaded plugins: fastestmirror |
| Loading mirror speeds from cached hostfile |
| * base: centos.mirror.iweb.ca |
| * extras: centos.mirror.iweb.ca |
| * updates: centos.mirror.iweb.ca |
| --> libdb-5.3.21-19.el7.i686 from base excluded (updateinfo) |
| --> libcxgb4-static-1.3.5-3.el7.i686 from base excluded (updateinfo) |
| --> libcxgb4-static-1.3.5-3.el7.x86_64 from base excluded (updateinfo) |
| --> libcxgb3-static-1.3.1-8.el7.x86_64 from base excluded (updateinfo) |
| --> libcxgb4-1.3.5-3.el7.x86_64 from base excluded (updateinfo) |
| : |
| 200行ほど出力 |
| : |
| --> firefox-45.7.0-1.el7.centos.x86_64 from updates excluded (updateinfo) |
| --> firefox-45.7.0-1.el7.centos.i686 from updates excluded (updateinfo) |
| --> firefox-45.7.0-2.el7.centos.x86_64 from updates excluded (updateinfo) |
| --> firefox-45.7.0-2.el7.centos.i686 from updates excluded (updateinfo) |
| --> firefox-52.0-4.el7.centos.x86_64 from updates excluded (updateinfo) |
| --> libvirt-daemon-driver-network-2.0.0-10.el7_3.2.x86_64 from updates excluded (updateinfo) |
| --> libvirt-daemon-driver-storage-2.0.0-10.el7_3.2.x86_64 from updates excluded (updateinfo) |
| --> libvirt-daemon-driver-storage-2.0.0-10.el7_3.4.x86_64 from updates excluded (updateinfo) |
| --> libvirt-daemon-driver-secret-2.0.0-10.el7_3.5.x86_64 from updates excluded (updateinfo) |
| --> libvirt-daemon-driver-secret-2.0.0-10.el7_3.9.x86_64 from updates excluded (updateinfo) |
| --> libvirt-daemon-kvm-2.0.0-10.el7_3.2.x86_64 from updates excluded (updateinfo) |
| --> libvirt-daemon-kvm-2.0.0-10.el7_3.4.x86_64 from updates excluded (updateinfo) |
| --> libvirt-daemon-driver-storage-2.0.0-10.el7_3.5.x86_64 from updates excluded (updateinfo) |
| --> libvirt-daemon-driver-storage-2.0.0-10.el7_3.9.x86_64 from updates excluded (updateinfo) |
| --> libvirt-daemon-kvm-2.0.0-10.el7_3.5.x86_64 from updates excluded (updateinfo) |
| --> libvirt-daemon-kvm-2.0.0-10.el7_3.9.x86_64 from updates excluded (updateinfo) |
| No packages needed for security; 53 packages available |
| ``` |
| 明らかに同じパッケージに対して過去のバージョンのパッチも出力されているように見える。 |
| これをAmazonLinuxみたいに出力させたい！ |
