I dont have much experience being a linux sysadmin but im in charge of a few servers in my office (about 15 or so). Almost all of them ubuntu's and debian. most of them kvm machines and a few physical boxes. Almost just a service per machine and almost all of them office related (mail box, the smtp box, the firewall box, the dns box, etc...)
The question is most of the boxes are outdated. we've got all the range from 8.04 to lastest ubuntu. We basically update a machine to get a new feature we need. Thing is, the 2 guys above me doesnt want to update, since there is always more important things to do. They think that (maybe based on experience) updating the boxes breaks things.
My point is we dont get the benefits of LTS or even regular security patches without updating. I dont want to update the whole version, just to keep the versions up to date to get all the fixes... they laugh at me like i was some kind of weird security paranoid freak. I know 100% secure is not possible, but to avoid script kiddies and automated attacks just by updating regularly would be nice...
Id like to remark that i lack much experience but im eager to learn. Therefore my question. Can you share your experiences with this regard?
Thanks!
EDIT: I just want to make clear that I only look for security upgrades. And to do it in not very time expensive way. Is the fear of my enterprise of security updates justify or I am just too noob without experience to tell?
[link] [26 comments]
