On 08/01/2013 10:45 AM, Thomas Bendler wrote:
> 
> There are a bunch of currently installed OS not patched because for a
> very long time, the default setting was not to update automatically.
> Nowadays ​​most of the current OS change this standard behavior, simply
> because of the fact you observed already on your own. If you don't want
> automatic updates after installation, simply execute "yum
> remove yum-autoupdate" or add -yum-autoupdate to your kickstart file in
> the %package section. But we are talking about the default behavior and
> the default behavior should be automatic updates as it is default in
> nearly all current OS because the majority of security expert agreed on
> this topic as a better approach for more security in the net.

Microsoft installs, and ASKS how you want your updates to run. It
doesn't blindly do it. Not that I want to use MS as an example... The
point I'm trying to make is if you're going to create an automatic
update system (which is in a very small RHEL based distribution, so it's
not going to change the security of the Internet much), on install it
should ask how to do updates. Yes, default to auto, sure, I have no
problem with that. But at least ask.

Vince