James B. Byrne wrote:
Be aware that updating bind via yum can result in your existing bind configuration files being renamed to something.rmpsave and your name server left in a dysfunctional state. I suggest that you consider excluding bind from normal updates and only update it when you are ready and able to check for possible configuration issues.
Or put those files under Cfengine or Puppet and have auto-yum work with the config management system.
But yeah, I agree, if the number of systems is small (so config management is not justified), avoid doing auto-updates to the critical components.