Ask HN: Automating server security/patches

5 pointsmaverhick2 comments

Hello guys,

We run a cluster of servers, mostly ubuntu. Are there automated tools for running security commands/checks/scans that you use on a regular basis to manage and keep your servers updated?

Are there any other specific sites/communities to refer to on these subjects?

Thanks

View on HN

Puppet or Cfengine to actually run the updates on the machines. Then you can run a vulnerability checker, such as nessus, to verify that the updates are installed.

There is a guide for automatic security updates for Ubuntu: https://help.ubuntu.com/10.04/serverguide/C/automatic-update...

Reply on news.ycombinator.com