diff --git a/README.md b/README.md
index 1274fe0..aef90f6 100644
--- a/README.md
+++ b/README.md
@@ -41,3 +41,6 @@ APT::Periodic::Unattended-Upgrade "0";
 # install updates on the other half of PROD
 10 12 * * 4 /usr/bin/unattended-upgrades
 ```
+
+## RPM based
+https://serverfault.com/questions/567195/how-can-i-exclude-a-package-from-yum-cron-but-not-from-manual-yum-upgrade
diff --git a/unattended-upgrades b/unattended-upgrades
index 80e8044..54af538 100644
--- a/unattended-upgrades
+++ b/unattended-upgrades
@@ -31,6 +31,7 @@ Unattended-Upgrade::Package-Blacklist {
     "elasticsearch.*";
     "etcd.*";
     "glusterfs.*";
+    "grub.*";
     "influxdb.*";
     "kafka.*";
     "leofs.*";