another sendmail patch question

[Michael Murphy_2]

Folks
The initial sendmail patch for HP-UX this week is a manual process in which you untar and replace the sendmail binary (does not update swlist database, makes it hard to confirm system was patched) Usually HP eventually sends a depot as well - but this occurs later. Any reason it is done this way? Any way to update the output of swlist manually to show patch applied?

[Steven E. Protter]

HP is working on depots

what sendmail

This command should show you the binary is the new one. If course you'll want to compare that to a what sendmail done prior to moving the binaries into production.

SEP

[Steven E. Protter]

You may need the full path to do the sendmail thing.


what /usr/sbin/sendmail

Should look like this:

/usr/sbin/sendmail:
Copyright (c) 1998 HEWLETT PACKARD COMPANY and its licensors,
including Sendmail, Inc., and the Regents of the
University of California. All rights reserved.
version.c 8.11.1 (Berkeley) - Revision 1.4 - 2003/05/05


SEP

[Helen French]

Yes, the one which HP released this week replaces only the binary files. But you can see the new version from this command:

# /usr/sbin/sendmail -d0.1 < /dev/null | grep -i version

Run this command before and after installation and you can see the difference. Since you didn't install a SD depot, you cannot see it from a swlist output.