On Sun, 15 Sep 2002, Mark Berkwitt wrote: > The update lists openssl and openssl-devel and also the kernel, but not > apache. > I'm only going for openssl, after all this is 7.3. If you've got a decent Internet connection, you might as well update all the available packages. I'm surprised that Apache isn't listed. It should be. The Apache version that ships with RH 7.3 has a vulnerability. And Hans is correct in that a cleaner way to turn services on and off is with RedHat's chkconfig utility. For example, chkconfig httpd on ...will essentially do the same thing as moving the symlink as I described, but it will do it for every applicable runlevel. ~M