Yeah this is bread and butter for config management tools. You'd either use a template for the config or the lineinfile module for Ansible.

Your template would have something like this:

PermitRootLogin {{ root_login_enabled }}

In it and then you can control which servers allow root login with the root_login_enabled variable.

This is the provider I use to clone KVM guests with Terraform https://github.com/dmacvicar/terraform-provider-libvirt

Short of getting advisories from vendors, just putting something on the calendar is probably best.

@dbeato said in Anyone running SonicOS 6.5.0.2-8n?:

@dave247 said in Anyone running SonicOS 6.5.0.2-8n?:

We run a SonicWall NSA 3600 where I work and I am staring to look into upgrading to the new 6.5 firmware (6.5.0.2-8n). I have heard of some issues with the last two updates, and wanted to get more input if anyone has any to give..

I am not, I am using the 6.2.9 on the production Sonicwalls we have. I would recommend to test it out if possible.

Unfortunately I can't realistically test it out. Even if I had an extra, non-production unit, I doubt I could effectively detect issues since production factors would not be present enough to fully test. I suppose I could just always roll back if necessary... but I think I will probably be waiting a few more releases.. that or just move to a different UTM all together..

FFS that is when I was planning to tag all my old threads.

My money on error 1603. Which means nothing but is usually the error in Windows Update logs.

@black3dynamite said in Meltdown Shows Why to Avoid LTS Releases:

What makes Red Hat and SUSE exempt compare to CentOS and OpenSUSE leap? Because we are paying for the support?

Nothing makes them exempt, they ARE CentOS and Leap, just paid for instead of free. They suffer just the same.

Have not seen any patching issues in the real world yet.

Yet....

@wls-itguy said in Windows laptops stuck at 1709.192 update.:

What in the #&#

Great! BTW, I read a while ago that WSUS was going away? Yet today in my searches for this issue I see that it is indeed still alive and well on 2012 servers? Did I dream that WSUS was going away?

It often should go away, but I don't know that MS is taking it away.

@stacksofplates said in Some macOS Updates Cause Foot Bug to Resurface After Patching:

I'm assuming this was supposed to be root but, not foot bug.

LOL hahha

@jmoore said in Linux vulnerability found - effecting Debian and RedHat:

@stacksofplates Oh that is interesting, I didn't know that.

Ya it forces it to use the legacy mmap layout which isn't vulnerable. Once you are able to reboot then you should be able to remove it.

@stus Thanks. Was just reading about it here.

Never used this but take a look...

http://www.smikar.com/

Not much pity for people not bothering to update.

https://www.theregister.co.uk/2017/04/13/microsoft_kills_support_old_windows_on_new_chips/

My answer to the OP. I mean I am not saying MS is good or bad, or Linux OS's are good or bad. But the OP was just a whiny bitch.

0_1489771473077_upload-b9cb86b3-5bb0-409a-bbe8-3b4008d3a94f