Security monitoring/updates

This pages summarizes the update mechanism used and how it is monitored.

London Tier2

UKI-LT2-IC-HEP

• Linux distro: Red Hat Enterprise Linux AS release 3
• Update tool: up2date
• Data Integrity: {{{integrity}}}
• New update checking: {{{check}}}
• Comment:

UKI-LT2-IC-LeSC

• Linux distro: Red Hat Enterprise Linux AS release 3
• Update tool: (local cluster utilities)
• Data Integrity: {{{integrity}}}
• New update checking: Read LCG-ROLLOUT.
• Comment: Use pre-existing package management tools from local repository. New packages are installed into site repository as needed. No fully-unattended updates.

UKI-LT2-Brunel

• Linux distro: slc304
• Update tool: apt-get
• Data Integrity: {{{integrity}}}
• New update checking: {{{check}}}
• Comment: For GreenStripe and the service nodes, I currently just have apt-get with autoupdate set to notify, and do the update weekly if necessary.

UKI-LT2-RHUL

• Linux distro: SLC3/RHEL-AS3
• Update tool: up2date/apt-get
• Data Integrity: {{{integrity}}}
• New update checking: {{{check}}}
• Comment: auto update on for LCG front end systems, run every night; weekly notification of updates for worker nodes, applied by hand as necessary

QMUL-eScience

• Linux distro: slc3
• Update tool:
• Data Integrity: {{{integrity}}}
• New update checking: {{{check}}}
• Comment: uses a local rpm repository that is manually updated

UKI-LT2-UCL-HEP

• Linux distro: slc3
• Update tool: apt-get
• Data Integrity: {{{integrity}}}
• New update checking: {{{check}}}
• Comment: nightly apt set to autoupdate except for kernel, set to notify

UCL-CCC

• Linux distro:
• Update tool: apt-get
• Data Integrity: {{{integrity}}}
• New update checking: {{{check}}}
• Comment:

SouthGrid

OXFORD-01-LCG2

• Linux distro: SL
• Update tool: Yum
• Data Integrity: {{{integrity}}}
• New update checking: pakiti
• Comment: Local mirror of SL rpm + errata

RAL-PPD

• Linux distro: SL
• Update tool: Yum
• Data Integrity: tripwire
• New update checking: pakiti
• Comment: Local mirror of SL rpm + errata,

BHAM-LCG2

• Linux distro: SL
• Update tool: Yum
• Data Integrity: {{{integrity}}}
• New update checking: pakiti
• Comment: {{{comment}}}

BRISTOL-PP-LCG

• Linux distro: SL
• Update tool: Yum
• Data Integrity: {{{integrity}}}
• New update checking: [1]
• Comment: Local mirror of SL rpm + errata

ScotGrid

ScotGRID-Edinburgh

• Linux distro: SL
• Update tool: APT
• Data Integrity: tripwire
• New update checking: nightly APT + email notification
• Comment: