Xeraph@NCHOVY

Pakiti : A Patching Status Monitoring Tool

Pakiti is using a client/server model, in which clients and servers are exchanging information using HTTP(S).

Once installed on a client host, Pakiti will check every night if new patches are available and report them to the relevant Pakiti Server(s).

As a result, while no updated packages are installed on the clients, Pakitiuses a Web page provides a list of the registered systems and the listof the pending patches for them. This helps the system administratorkeeping multiples machines up-to-date and prevent unpatched machines tobe kept silently on the network.

In addition, a security module in Pakiti is able to distinguish security fixes from normal bug fixes/product improvement for the following Linux distributions:
- Scientific Linux 3.x
- Scientific Linux 4.x
- Ubuntu (The Breezy Badger Release)
- Ubuntu (The Warty Warthog Release)

The security module is expected to support Scientific Linux CERN around February 2006.

Pakiti should work with the following distributions:
- Scientific Linux 3.x using yum or apt-get
- Scientific Linux 4.x using yum or apt-get
- The Breezy Badger Release) using apt-get
- Ubuntu (The Warty Warthog Release)
- Red Hat Entreprise Linux 3 AS/ES/WS using up2date
- Red Hat Entreprise Linux 4 AS/ES/WS using up2date
- Fedora Legacy Linux (Red Hat 7.x, 8, 9) using yum
- Fedora Core 1/2/3/4 using yum

While Pakiti clients are sending data to Pakiti servers, the Pakiti servers can also send each other general statistics or a detailed reports. The list of trusted Pakiti servers is configurable in the server configuration file.