full-disclosure - Cronning Update Jobs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: luke at normanonline.co.uk (Luke Norman)
Subject: Cronning Update Jobs

Morning List,
                  I hope this is security/vulnerability related enough 
for me to post on this list. If you feel it isn't, feel free to reply 
off-list to tell me so. I'd hate for this to turn into another spammy 
thread :p
    I run a Gentoo Linux server from home, running apache, exim, an 
ircd, ftpd and bnc. It links to an IRC network that I co-admin, and 
provides mail and website for that network, as well as providing me with 
a useful place to store files. If any of you are unfamiliar with 
linux/gentoo, I can update all the installed packages on the box by 
typing 'emerge sync && emerge -u world'. I tend to do this when I can, 
but sometimes im away for a few days, and so am unable to do this manually.
    My question is this - are there any security risks to adding this 
command to a cron job, and having it execute say, once every 12 hours. 
Any and all input appreciated
Thanks
Luke