Patch usage model 6 reactive patch | HP UX Patch Management specs

Patch usage model 6: reactive patch

Begin:

System has a problem

Identify/ diagnose problem

1

Search ITRC for possible resolution

Fix found?

No

Analyze fix:	Fix
Risk	approved
Dependencies	for
Installation issues	immediate
	action
	Fix
	deferred
Yes
	Fix
	rejected
Yes
Contact	Fix
vendor for	identified?	No
support

Acquire		Go to A –Install,
Acquire		Test, Distribute
fix		Test, Distribute
fix

	Save fix or patch
	to be installed			Go to HP-UX 11i v2/v3
	during proactive			Proactive Patching model
	maintenance

Work with vendor to identify the fix (process not shown)

A

Install/

validate on

test/pre-

production system

Test			Install on
Test	Yes		production
passed?	Yes		production
passed?			system
			system
No
No

Go back to 1 HP- -UX 11 i v2/v3 Reactive Patching

Create recovery archive image

Include fix in master depot or golden image

End: Working system with fix applied

Patch usage model 6: reactive patch 103

Image 103

HP UX Patch Management manual Patch usage model 6 reactive patch, Passed? System

Contents

Patch Management User Guide for HP-UX 11.x Systems Revision history Table of Contents What are standard HP-UX patch bundles? Using Dynamic Root Disk for patch management 107 104 Patch management strategies HP-UX patches and patch management Where to start How to get patches Should you use standard HP-UX patch bundles? Quick start guide for patching HP-UX systemsOverview Before you begin Standard HP-UX patch bundles Acquiring and installing standard HP-UX patch bundlesAcquiring the bundles As root, run the createdepothp-ux11script Installing the bundles Swlist Advanced topic using Dynamic Root Disk DRD Acquiring the patches Acquiring and installing individual patches Quick start guide for patching HP-UX systems Swverify -d \* @ /tmp/somepatchdirectory/depot Installing the patches Advanced topic using Dynamic Root Disk DRD HP-UX software structure HP-UX patch overviewPatch-related concepts Patch identification Software depots and patch depots Patch bundles Patch state Patch status Category tags StateSwlist -l fileset -a state grep patchid Swlist -l product -a categorytag patchid Which patches are on a system? For example Examples of the swlist command $ swlist -l product *,c=patch $ swlist -l bundle @ somesystem $ swlist -l product *,c=manualdependencies Ancestors Ancestors and supersession$ swlist -l fileset -a ancestor PHSS29183 Swlist -a appliedpatches filesetname Supersession$ swlist -a appliedpatches Xserver.AGRM Showpatches -s Swlist -l patch -x showsupersededpatches=true Swlist -a patchstate -x showsupersededpatches=true patchid $ swlist -l fileset -a supersedes PHSS28681 HP-UX Patch Supersession Chain Patch-related attributes See Category tags Types of dependencies Patch dependenciesCorequisites and prerequisites Impact of dependencies on acquiring patches Enforced and unenforced manual dependenciesSwlist -vl fileset -a dependencytype fileset Patch rollback Patch rollback and commitmentPatch commitment Cleanup -p -c number Advanced topic patch cleanup utilityHP-UX patch ratings Rating details HP patch rating $ swlist -l product -a categorytag PHSS30011 Critical and noncritical patchesFinding information for a specific patch Patch documentation Subset of fields in patch text file and patch details Swlist -l product -a readme patchid more Obtaining information using the ItrcPatch warnings Advanced topic the readme attribute Critical and noncritical warnings Questions to ask How to handle patch warningsAdvanced topic finding patches with warnings Considerations Backup and recovery Patch management life cycle Patch management overview Patch management life cycle Patch management overview Restrictive Conservative Innovative Establishing a software change management strategy Operational factor and patch management strategy matrix Recommendations for software change management Patch management and software depots Consideration of HP patch rating Acquiring patches for proactive patching Proactive patching strategy Advanced topic HP-UX Software Assistant Reactive patching strategy Acquiring patches for reactive patching Advanced topic security patching strategy Advanced topic scanning for security patches Testing the patches to be installed What are standard HP-UX patch bundles? Key featuresStandard HP-UX patch bundles Standard HP-UX patch bundle use and release dates Obtaining standard HP-UX patch bundles Quick start guide for patching HP-UX systems Find individual patches Using the IT Resource CenterObtaining an Itrc user account Useful pages on the Itrc Accessing the patch database and finding an individual patch Key features Click the add to selected patch list button Using the IT Resource Center Check for patches with dependencies Advanced topic checking for all patch dependencies Using the IT Resource Center Click the add to selected patch list button Ask your peers in the forums Standard patch bundlesCustom patch bundles run a patch assessment Support information digests Search knowledge base Common software distributor commands for patching Using software depots for patch management Directory depots Depot types Tape depots Using depots Choosing depot type and depot location Viewing depotsSwlist -l depot Swlist -l depot @ remotesystem $ swlist -l depot$ swlist -l depot @ swdepot.xyz.com Creating and adding to a directory depot Depot/patches/11.11 Copying patches to depots Advanced topic HP-UX Software Assistant Registering and unregistering directory depotsCopying products with patch dependencies to depots $ swreg -u -l depot /depot/patches/2003-07periodicdepot Advanced topic access control listsExamples of registering and unregistering depots $ swreg -l depot /depot/patches/2003-07periodicdepot Examples of verifying directory depots Verifying directory depots$ swverify -d \* @ /mydepots/newdirectorydepot $ swverify -d \* @ /mydepots/PHSS30278depot Verification had errorsRemoving software from a directory depot Verification succeeded Execution succeeded Advanced topic removing superseded patches from a depot $ /usr/sbin/cleanup -d /mydepots/patchdepot$ swlist -l product -d @ /mydepots/patchdepot $ swreg -u -l depot /mydepots/PHCO27780depot Installing patches from a depotRemoving a directory depot $ swlist -l product @ /mydepots/patchdepot Reboots the system when required Analysis succeeded Examples of installing patches from a depot Custom patch bundles Installing products with patch dependencies from a depotAnalysis and Execution succeeded Rev Patch description Examples of listing patches and bundlesRev Bundle Description $ swlist -d @ /mydepots/temporarydepot Creating a custom bundle Analysis succeeded Finally, remove the temporary depot For more information Using HP-UX Software Assistant for patch management Using Dynamic Root Disk for patch management Drd1m Patch Assessment Tool Using the Patch Assessment ToolBenefits of the Patch Assessment Tool Example of running the Patch Assessment Tool Select upload new system information Contacting HP Support and other resourcesRelated information HP websites Typographic conventionsNon-HP websites Times Patch usage models Components in test Image Then production Patch usage model 1 hardware/application software change DRD Begi n Product needs to be certified on HP-UX 11i v2/v3 Patch usage model 3 operating environment cold install Patch usage model 3 operating environment cold install Patch usage model 4 operating environment update Patch usage model 4 operating environment update Create clone Patch usage model 5 proactive patch Passed? System Patch usage model 6 reactive patch Ancestor Glossary IPD SWA Index Index See also HWE Index