Closed Bug 1079910 Opened 11 years ago Closed 6 years ago

Satisfy "sysmediumupdates1"

Categories

(Infrastructure & Operations :: RelOps: Puppet, task)

Product:
Infrastructure & Operations
Component:
RelOps: Puppet
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: dustin, Unassigned)

References

Details

(Whiteboard: [relsec])

https://mana.mozilla.org/wiki/display/ITSECURITY/IT+System+security+practices Must be updated on a regular basis with security updates. Auto-update for security updates every day, week, etc. See Vulnerability management (software security updates) for more information. ---- Our schedule for updating systems is, in practice "never". That's not good enough. We need some regular schedule, although that can be as infrequently as "quarterly". Exactly how we accomplish this will depend on whether we shift to an image-based deployment system, or continue on with our evolved-configuration model.
Whiteboard: [kanban:engops:https://kanbanize.com/ctrl_board/6/320]
Whiteboard: [kanban:engops:https://kanbanize.com/ctrl_board/6/320] → [kanban:engops:https://mozilla.kanbanize.com/ctrl_board/6/717] [kanban:engops:https://kanbanize.com/ctrl_board/6/320]
Whiteboard: [kanban:engops:https://mozilla.kanbanize.com/ctrl_board/6/717] [kanban:engops:https://kanbanize.com/ctrl_board/6/320] → [kanban:engops:https://mozilla.kanbanize.com/ctrl_board/6/717]
Whiteboard: [kanban:engops:https://mozilla.kanbanize.com/ctrl_board/6/717] → [relsec]
I'm not sure this will ever change, but ccing people who should be in on that discussion from a security perspective.

Old puppet is in the process of being replaced. AWS AMI's can be updated on a regular basis.

Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.