Managing Systems and Workgroups: A Guide for HP-UX System Administrators

Administering a System: Managing System Security
Security Patch Check
Chapter 8854
Security Patch Check
Security Patch Check is a tool that helps you automate the process of
checking the current list of HP-UX security patches and bulletins and
determining whether you need to patch, update, or manually configure
your system to be in bulletin compliance. It runs on all HP-UX 11.0 and
11i systems.
When Security Patch Check runs, it analyses your system’s current
status and displays a list of recommended security patches, a list of
installed patches with warnings, and an analysis of software updates
and manual actions that are contained in security bulletins.
Requirements
Security Patch Check requires the Perl software package, HP version
B.5.6.1.C or newer. If you want to use the secure HTTP protocol (https), it
requires Perl, HP versions D.5.8.0.C or D.5.8.2 or newer, and the
OpenSSL software package.
Working with a Firewall
If your system is behind a proxy-type firewall, you need to set a *_proxy
environment variable for your preferred data transfer method to the web
address of your proxy server, in the form (in decreasing order of security).
HTTPS: export https_proxy= protocol :// address : port
HTTP: export http_proxy= protocol :// address : port
FTP: export ftp_proxy= protocol :// address : port
where:
• protocol is the method your proxy server uses, usually http.
• address is the Internet address of your proxy server.
• port is the port used by your proxy server, usually 8088.
If you are using HTTPS, you need to set http_proxy as well.
Examples
For HTTPS,