Keeping your computer systems up to date has always been important. But now that word has gotten out that big brother is scanning whole countries networks and actively probes their ports keeping systems up to date is the least should do. Who knows if they are not installing backdoors as well, as a precautionary measure of course 🙂 So at least make it harder for them by keeping your system patched, it can be as easy as installing and running unattended-upgrade:
|
1 2 |
sudo apt-get install unattended-upgrades -y sudo unattended-upgrade |
Now edit /etc/apt/apt.conf.d/10periodic:
|
1 |
sudo nano /etc/apt/apt.conf.d/10periodic |
and add/edit the following lines:
APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Download-Upgradeable-Packages "1";
APT::Periodic::Unattended-Upgrade "1";
Now you can select which updates to run by uncommenting some lines in /etc/apt/apt.conf.d/50unattended-upgrades:
|
1 |
sudo nano /etc/apt/apt.conf.d/50unattended-upgrades |
I usually allow security and normal updates but reject proposed and backports.