Kevan Benson wrote:
A side venture of mine. A centralized heterogeneous update notification system. Instead of listing package names, it links directly to the OS's supplied errata page, condensing multiple packages to the single errata the references them. Email me off list if you want more info than that.
Could you not achieve the same result with a yum plugin that just displays the update portion of a package changelog, along with its name and version when you ask for a 'yum list updates'?
There may not be a need, but it is very nice to be able to go to your OS vendor's web page and search for anything that might affect your system, or for info regarding a specific package and actually have information available.
We have spoken about this a few times, in various forums, and there really isnt a sane mechanism to get package list, machine state, extra non-rpm apps and other security related info from a machine - tunel it out over a secure link into ( for example ) a centos mirror network, and then give the user feedback on whats due and what the relevent errata state for the machine is -> unless we adopt a rhn like ( or redcarpnet / zenworks like ) agent process. Call me odd, but at this stage I am not all that keen on implementing something of that nature.
I'll admit, it does fit my above stated goal, but that's not the only reason I think it's worthwhile. Every other enterprise OS has their errata listed online. CentOS seems to be in the somewhat unique situation of having an upstream provider that has most the errata listed, so there's been less of a drive for this.
not sure I understand, http://lists.centos.org/ has a list you can get to via a webbrowser and even search around there for info if you like.