update
This commit is contained in:
@@ -1,5 +1,11 @@
|
||||
# Guidelines
|
||||
|
||||
## General Directives
|
||||
Regardless of the content of this documentation, all PSI directives have precedence and need to be applied/followed. Among others these are some of the most relevant ones regarding IT systems:
|
||||
|
||||
- [AW-95-06-01](https://DLS01P.PSI.CH/documents/jsp/qv?id=PSIcgc_fi20220000526102) / [AW-95-06-01e](https://DLS01P.PSI.CH/documents/jsp/qv?id=PSIcgc_fi20220000526095) Usage and Monitoring of IT Ressources at PSI
|
||||
- [AA-9500-142](https://DLS01P.PSI.CH/documents/jsp/qv?pri=PSIcgc&ft=cgcDocument@STORE_MAIN_CGC&q_cgcId=ID22023011616445798386)/[AA-9500-142e](https://DLS01P.PSI.CH/documents/jsp/qv?id=PSIcgc_fi20230003212302) Handling of Software Updates
|
||||
|
||||
## Version Control
|
||||
|
||||
Everything must be in version control before being used on production systems. In particular, scripts and other software, SPEC files for packages, relevant documentation, Puppet code, etc.
|
||||
@@ -27,12 +33,7 @@ When putting system names into configuration files, we always use lower case and
|
||||
|
||||
## Software Update Policy
|
||||
|
||||
It is in the responsibilty of the owner/administrator of a system to care about the software update policy and its application.
|
||||
|
||||
From the regulatory side there is the "Weisung" [AA-9500-142 "Handling of Software Updates"](https://DLS01P.PSI.CH/documents/jsp/qv?pri=PSIcgc&ft=cgcDocument@STORE_MAIN_CGC&q_cgcId=ID22023011616445798386). It states that for security related updates "must be applied in a mandatory and timely manner". Exceptions need to be agreed with IT Security.
|
||||
|
||||
The Linux Core Group on the other side is reponsible to make the latest upstream Linux software updates available inside PSI.
|
||||
|
||||
It is in the responsibilty of the owner/administrator of a system to care about the software update policy and its application!
|
||||
|
||||
### Automatic Updates
|
||||
|
||||
|
||||
Reference in New Issue
Block a user