topic Re: Using patch assesment tool in Operating System - HP-UX

Using patch assesment tool

rana786 — Tue, 24 Jan 2006 05:52:27 GMT

Hi all,
I like to use Patch Assessment Tool for patch assessment, I have already downloaded the cmp_collect.sh from “itrc.hp.com” site. As you know, since this is production and mission critical environment so before I run this script I want to be sure that it will not make any problem in my current environment.

I also want to use “Security Patch Tool” I am a bit confused about it could you please give me the steps how to use this tools. Is there any place in itrc.hp.com for security patch assessment like patch assessment with “Patch Assessment tool”.

Rgds,
Mostafa

Re: Using patch assesment tool

James R. Ferguson — Tue, 24 Jan 2006 06:22:56 GMT

Hi Mostafa:

Perhaps these links help:

First:

http://www2.itrc.hp.com/service/patch/assessSystemsPage.do

Then, on the upper right (Configuring an assessment profile):

http://www2.itrc.hp.com/service/patch/wrap.do?pageKey=patch.html.howToConfigureAssessment

You will note that security patches are one of the options for assessment.

Regards!

...JRF...

http://www2.itrc.hp.com/service/patch/wrap.do?pageKey=patch.html.howToConfigureAssessment

Re: Using patch assesment tool

Steven E. Protter — Tue, 24 Jan 2006 08:29:43 GMT

Shalom Mostafa,

Both security_patch_check and cpm_collect.sh scripts are completely harmless.

They run swlist commands against your SD/UX database and compare them to HP recommended configurations.

swlist as the name implies lists it does not change. I ran these tools regularly on production systems.

Now, once you run the tools, you get recommendations. These recommendations can include dangerous patches and you need to very carefully decide what to do and test the installation in a test/system environment prior to isntalling production.

I recommend a full make_tape_recovery backup prior to installing patches in any productcion system.

SEP

Re: Using patch assesment tool

Arturo Galbiati — Wed, 25 Jan 2006 03:49:29 GMT

Hi Mostafa,
don't worry about the cmp_collect.sh.
I'm using it from a lot of time and no problem encountered.
HTH,
Art