HP-UX Software Assistant Reference (November, 2010)

swa-report(1M)

NAME

swa-report: swa -- Report software and security issues, and resolutions

SYNOPSIS

swa report [-a analyzer] [-r stdout_report_type] [-s inventory_source]

[-q [q[q]]] [-v[v]] [[-option] -?] [-x option=[value|-?]] [-X option_file]

DESCRIPTION

The swa report command inventories and analyzes a host system or depots used for full-system

installation, such as the installation depot on an OE DVD. Systems are analyzed for patch warnings,

critical defects, security bulletins, missing Quality Pack (QPK) patch bundles, and user-specified

patches and supersession chains. HP-UX Software Assistant (SWA) then generates three results:

• A comprehensive HTML report saved in a file

• A text report printed to standard output (report types include Action, Issue, and Detail)

• An analysis results file that the swa get command uses

Each of these results indicates the issues found with new software and fixes that Hewlett Packard

recommends.

Security Considerations

The analysis that swa report performs relies on the integrity of the inventory to determine the

appropriate patches to install on the system. It is important that all protocols used to transmit the

inventory data are integrity protected and that the host used to generate the inventory data is

accurately represented. For example, use of swlist for gathering an inventory of a remote system

uses a clear-text, unauthenticated protocol that does not protect the integrity of the data. Using

Secure Shell to gather an inventory of a remote system uses an integrity protected (and encrypted)

protocol. Even when using Secure Shell, the analysis still relies on the source of the data (the remote

host) to accurately represent the software contents installed on that system.

Options

swa report recognizes the following options:

-a analyzer Specifies an analyzer to use. Each analyzer represents a different

type of analysis that swa can perform. You may specify multiple

-a options. The supported analyzers are as follows:

CRIT patches that fix critical

problems

PCW installed, active patches

with critical warnings

PW installed, active patches

with warnings (a superset

of PCW)

QPK latest quality pack

SEC security bulletins that may

apply

CHAIN=patchID[,patchID]* Given a specific patch,

SWA indicates whether

that patch is required for

your system or not. If the

patch is required, SWA

selects the HP