Linux Administration Cookbook

There's more...

Like unattended upgrades on Debian, yum-cron has the ability to work through only specific types of upgrades. By default, this is set to default, as seen in the following snippet, which is why we didn't modify it earlier:

$ cat /etc/yum/yum-cron.conf [commands]#  What kind of update to use:# default                            = yum upgrade# security                           = yum --security upgrade# security-severity:Critical         = yum --sec-severity=Critical upgrade# minimal                            = yum --bugfix update-minimal# minimal-security                   = yum --security update-minimal# minimal-security-severity:Critical =  --sec-severity=Critical update-minimalupdate_cmd = default

There's nothing stopping you from changing this, perhaps specifying that only security upgrades should be applied automatically?