topic Re: Security Patch Check in Operating System - HP-UX

Security Patch Check

Karl Balsmeier — Fri, 18 Apr 2003 21:32:18 GMT

I have just installed this tool, but there is no man page for it. I also do not know where it installed to.

I used the specific directions in:

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B6834AA&oper=install

I used the interactive version of swinstall, but it appeared vague, perhaps it didn't take?

I did a manual swinstall and it noted it was installed.

What's the best way to resolve this and get moving on the fun part?

-karl

Re: Security Patch Check

Zafar A. Mohammed_1 — Fri, 18 Apr 2003 21:42:35 GMT

It was install into your S/W Depot. You can check from SAM.

thanks
Zafar

Re: Security Patch Check

Patrick Wallek — Fri, 18 Apr 2003 22:01:47 GMT

The files are installed to /opt/sec_mgmt/spc

There is a README file in that directory.

The actual binary is located in /opt/sec_mgmt/spc/bin and it is called security_patch_check

If you didn't install HP's Perl distribution, you'll need to make sure that you either install it or make sure you have all the modules you need compiled into your version.

Re: Security Patch Check

Bill Hassell — Sat, 19 Apr 2003 02:32:17 GMT

The man page is installed in /opt/sec_mgmt/share/man so there will be an entry in /etc/MANPATH. That way, when you login again, man will locate the page. If you did not logout after installing the tool, then your MANPATH won't have the new entry which looks like this:

:/opt/sec_mgmt/share/man/%L

Re: Security Patch Check

Steven E. Protter — Sun, 20 Apr 2003 03:06:53 GMT

Here is my script for running security patch check.

# export ftp_proxy=http://firewall.juf.net:80
security_patch_check -r -d > /tmp/secpatch.dat
np -qQiss3 /tmp/secpatch.dat
rm /tmp/secpatch.dat

The first line is in case you need to go through a rpoxy server. The np line is for printing the output in openspool.

The security_patch_check line will check your system against the patch database at HP and produce a report. That is what you need.

SEP

Re: Security Patch Check

Cheryl Griffin — Mon, 21 Apr 2003 10:22:55 GMT

In addition, the security_patch_check
README is at
http://www.docs.hp.com/cgi-bin/otsearch/getfile?id=/hpux/onlinedocs/internet/spc_readme.html&searchterms=security_patch_check&queryid=20030421-051402

FAQ is at
http://www.docs.hp.com/cgi-bin/otsearch/getfile?id=/hpux/onlinedocs/internet/spc_faq.html&searchterms=security_patch_check&queryid=20030421-051515