Advanced topic access control lists | HP UX Patch Management

NOTE:

•Registered depots on a network server are both visible and accessible to remote systems. These depots can be used as a software source for remote systems.

•Unregistered depots on a network server are neither visible nor accessible to remote systems. These depots cannot be used as a software source for remote systems.

Depots can be registered or unregistered in the following ways:

•The swreg command explicitly registers or unregisters depots.

•The swcopy command automatically registers newly created depots.

•The swremove command automatically unregisters a depot after removing all the software contained in the depot.

If you have a depot that you want other users to access, you must register it. You should only do this if you intend the depot to be used as a software source for remote systems.

Depot registration is not required for access from the local host. Registration also is not required for using the swlist command remotely to view depot contents. For additional details about the swreg command, see the swreg(1M) manpage and the Software Distributor Administration Guide on the HP Business Support Center website at http://www.hp.com/go/sd-docs.

Examples of registering and unregistering depots

To register a depot, use this command:

swreg -l depot directory_path_to_depot

For example:

$ swreg -l depot /depot/patches/2003-07_periodic_depot/

======= 05/05/04 09:55:53 MDT BEGIN swreg SESSION (non-interactive)

*Session started for user "some_user@my_system".

*Beginning Selection

* Targets:	my_system
* Objects:	/depot/patches/2003-07_periodic_depot/
* Selection succeeded.
======= 05/05/04 09:55:53 MDT END swreg		SESSION (non-interactive)

To unregister a depot, use this command:

swreg -u-l depot directory_path_to_depot

For example:

$ swreg -u -l depot /depot/patches/2003-07_periodic_depot/

======= 05/05/04 09:40:17 MDT BEGIN swreg SESSION (non-interactive)

*Session started for user "some_user@my_system".

*Beginning Selection

* Targets:	my_system
* Objects:	/depot/patches/2003-07_periodic_depot
* Selection succeeded.
======= 05/05/04 09:40:17 MDT	END swreg SESSION (non-interactive)

Advanced topic: access control lists

If you require finer control over directory depot access, you should familiarize yourself with Access Control Lists (ACLs) and the swacl command. You can use ACLs to grant a variety of access rights to certain systems or users. For more information, see the Software Distributor Administration Guide on the HP Business Support Center website at http://www.hp.com/go/ sd-docs.

72 Using software depots for patch management