Got the following..... any easy way to 'refresh' filelists.xml.gz?
You could add the specific command to refresh to your /etc/sudoers file.
I haven't done that - but I do have a group that is allowed to specifically run "yum update" and "yum -y update" with no password required (though everything else gets rejected - such as yum install or yum remove)
Makes life somewhat easier - I may add the refresh command as well.