We are running RHN Satellite and RHEL 6.3 servers with a frozen RHEL 6.3-channel.
What are the best practices in keeping older RHEL 6.3-servers secure?
It is important that:
- We do not get new features that can break applications
- We do get the latest security updates
- Should we push all RHN errata from the official Red Hat channel to our cloned frozen 6.3 channel?
- Does this not update the software to the latest version? Because we do not want software updates that can possibly break applications, just the major security updates.