Patch Management User Guide for HP-UX 11.x Systems (762796-001, March 2014)
Table Of Contents
- Patch Management User Guide for HP-UX 11.x Systems
- Contents
- 1 HP secure development lifecycle
- 2 HP-UX patches and patch management
- 3 Quick start guide for patching HP-UX systems
- 4 HP-UX patch overview
- 5 Patch management overview
- Patch management life cycle
- HP service contracts
- Patch management and software change management strategies
- Establishing a software change management strategy
- Recommendations for software change management
- Consideration of HP patch rating
- Patch management and software depots
- Proactive patching strategy
- Reactive patching strategy
- Advanced topic: security patching strategy
- Advanced topic: scanning for security patches
- Testing the patches to be installed
- 6 What are standard HP-UX patch bundles?
- 7 Using the HP Support Center
- Obtaining an HPSC user account
- Useful pages on the HPSC
- Find individual patches
- Advanced topic: checking for special installation instructions
- Advanced topic: checking for all patch dependencies
- Standard patch bundles
- Custom patch bundles - run a patch assessment
- Support information digests
- Ask your peers in the forums
- Search knowledge base
- 8 Using software depots for patch management
- Common software distributor commands for patching
- Depot types
- Using depots
- Viewing depots
- Creating and adding to a directory depot
- Registering and unregistering directory depots
- Verifying directory depots
- Removing software from a directory depot
- Removing a directory depot
- Installing patches from a depot
- Custom patch bundles
- 9 Using HP-UX Software Assistant for patch management
- 10 Using Dynamic Root Disk for patch management
- 11 The Patch Assessment Tool
- 12 Support and other resources
- 13 Documentation Feedback
- A Patch usage models
- Glossary
- Index
Ancestors and supersession
The related concepts of ancestors and supersession are integral to patches and patch management.
It is important that you gain a basic understanding of both. It might also be helpful for you to recall
information presented in “HP-UX software structure” (page 18).
Ancestors
The ancestor of a patch is the original software product that a patch modifies. Ancestry is defined
only at the fileset level. Each patch fileset has only one ancestor fileset that composes the base
software that a patch modifies. However, there might be one or more versions of this ancestor
fileset. The patch fileset has the same extension as its ancestor. For example, fileset Xserver.AGRM
is the ancestor of patch fileset PHSS_29183.AGRM. You can see an additional example in
“Advanced topic: determining patch ancestors” (page 27).
Ancestry impacts both patch installation and patch removal. A patch fileset cannot be installed on
a system unless its ancestor fileset software either is already installed or is being installed during
the same operation. Similarly, when an ancestor fileset is removed, all the patches that have been
applied to it are also removed.
Advanced topic: determining patch ancestors
You can determine a patch fileset's ancestor using the patch's ancestor attribute with the swlist
command. The following command lists the ancestor filesets for the filesets of patch patch_id:
swlist -l fileset -a attributepatch_id
For example:
$ swlist -l fileset -a ancestor PHSS_29183
# Initializing...
# Contacting target "chb26006"...
# Target: chb26006:/
# PHSS_29183
PHSS_29183.AGRM Xserver.AGRM,fr=B.11.11,v=HP
PHSS_29183.DDX-ADVANCED Xserver.DDX-ADVANCED,fr=B.11.11,v=HP
PHSS_29183.DDX-ENTRY Xserver.DDX-ENTRY,fr=B.11.11,v=HP
PHSS_29183.DDX-LOAD Xserver.DDX-LOAD,fr=B.11.11,v=HP
PHSS_29183.DDX-SAM Xserver.DDX-SAM,fr=B.11.11,v=HP
PHSS_29183.DDX-SLS Xserver.DDX-SLS,fr=B.11.11,v=HP
PHSS_29183.DDX-UTILS Xserver.DDX-UTILS,fr=B.11.11,v=HP
PHSS_29183.X11-SERV Xserver.X11-SERV,fr=B.11.11,v=HP
PHSS_29183.X11-SERV-MAN Xserver.X11-SERV-MAN,fr=B.11.11,v=HP
PHSS_29183.XEXT-DBE Xserver.XEXT-DBE,fr=B.11.11,v=HP
PHSS_29183.XEXT-DBE-MAN Xserver.XEXT-DBE-MAN,fr=B.11.11,v=HP
PHSS_29183.XEXT-DPMS Xserver.XEXT-DPMS,fr=B.11.11,v=HP
PHSS_29183.XEXT-DPMS-MAN Xserver.XEXT-DPMS-MAN,fr=B.11.11,v=HP
PHSS_29183.XEXT-HPCR Xserver.XEXT-HPCR,fr=B.11.11,v=HP
PHSS_29183.XEXT-HPCR-MAN Xserver.XEXT-HPCR-MAN,fr=B.11.11,v=HP
PHSS_29183.XEXT-MBX Xserver.XEXT-MBX,fr=B.11.11,v=HP
PHSS_29183.XEXT-RECORD Xserver.XEXT-RECORD,fr=B.11.11,v=HP
Patch filesets that have been applied to an ancestor fileset are listed in the ancestor's
applied_patches attribute. Enter the following command:
swlist -a applied_patches fileset_name
For example:
$ swlist -a applied_patches Xserver.AGRM
# Initializing...
# Contacting target "chb26006"...
# Target: chb26006:/
Xserver.Runtime.AGRM
PHSS_21817.AGRM,fa=HP-UX_B.11.11_32/64
Ancestors and supersession 27