[CentOS] Re: [CentOS-announce] CESA-2006:0493 Important CentOS 4 i386 kernel - security update

[Johnny Hughes]

On Sun, 2006-05-28 at 17:58 +0100, Karanbir Singh wrote:
> Bart Schaefer wrote:
> > On 5/28/06, Johnny Hughes <mailing-lists at hughesjr.com> wrote:
> >>
> >> For all future kernels in the CentOS-4 CentOSPlus repos ... they will
> >> exactly follow the normal upstream versions ... except that the '.EL'
> >> will be replaced with '.plus.c4'.
> > 
> > So what effect is this intended to have on "yum update" in the event
> > that the CentOS rebuild of a new upstream kernel is released before
> > the corresponding Plus kernel is released?
> 
> If you are using a centosplus kernel, you should have an exclude= line
> setup for the [base] repo to ensure that kernel is not picked up.

The exclude= line:

exclude=kernel-2* kernel-smp* kernel-devel kernel-hugemem* kernel-
largesmp*

needs to be in both the [base] and the [updates] section of the CentOS-
Base.repo file.  The reason for the long line and not just
exclude=kernel* is the package named kernel-utils ... which is not in
centosplus but needs to be updated from the [base] and/or [updates]
repo.

You also need to exclude other packages from centosplus {that you are
using} from [base] and [updates].

also ... if you are only interested in only the kernel packages in
centosplus ... and you do not want php-5 (as and example) then you would
add this line to the centosplus repo:

includeonlypkgs=kernel*







> 
> If a higher/ newer Version-Release is made available in [base] that is
> always going to override a lower version, even with a -.plus.c4 in there.
> 
> - KB
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://lists.centos.org/pipermail/centos/attachments/20060528/f567f822/attachment.sig>