full system backup needed before shellshock patching?
Dear All,
Do I need to perform full system backup before patching the bug (yum update bach)? I am using RHEL 5.6 Beta and RHEL 6.5 and only use these servers as database (Oracle). Thanks in advance for your guide!
Cheers,
Ruzman
Responses
Hi!
The update should not cause any loss of data. The process is not invasive and in all cases I've seen it did not create any trouble. In most cases, it's not even needed to reboot.
I always think is a very good idea to read through this page, though, to understand not only what the vulnerability is but also what the implications are:
Bash Code Injection Vulnerability via Specially Crafted Environment Variables (CVE-2014-6271, CVE-2014-7169)
https://access.redhat.com/articles/1200223
Cheers,
Dan
We have patched several hundred systems without a single incident. Whether you should take a full backup of your system - I guess that depends on your own process and strategies and what Backup solution you are using. For most tasks I no longer specifically validate that a full backup exists because in our environment we get daily reports of systems which have any issues with backups and address those issues immediately.
Tough question ;-) When in doubt.. run a backup (or at a minimum validate the backups are good).
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.
