the-practical-linux-hardening-guide/lib/post_install_tasks/keep_system_updated.md

Post install tasks

Keep system updated

ℹ️ Introduction

Software updates offer plenty of benefits. It’s all about revisions. These might include repairing security holes that have been discovered and fixing or removing computer bugs.

Some benefits:

• close up problems of security that has been discovered
• it can improve the stability of the system
• improvements the system stacks, e.g. network stack

✴️ Make sure that the system is up to date

For CentOS:

# Check for updates
yum check-update

# Install updates
yum update

For Debian:

# Check for updates
apt-get update -qq ; apt-get upgrade -duyq

# Install updates
apt-get upgrade && apt-get dist-upgrade

Useful resources

• How Often Should I Update our Linux Server?

Policies

Policy	ID/Description	Severity
STIG	V-71999	Medium
CIS	1.2, 1.8
OpenSCAP	CCI-002605, CCI-002607	CAT II

☑️ Summary checklist

Item	True	False
Regulary update your system	🔲	🔲
Automatic check system updates	🔲	🔲