Software Distributor (SD-UX) Administration Guide HP-UX 11i v1, 11i v2, and 11i v3 (762797-001, March 2014)

Depots and Depot Registration
Software Distributor typically uses central depots to distribute software. You can control access to
these depots by users who will install software.
An important security consideration is that depots must be registered for nonlocal users to have
access. Only a local superuser or a user with insert permission on the host can install from
unregistered depots.
For more information, see “Registering and Unregistering Depots (swreg) ” (page 93) and “Depot
Management Commands and Concepts” (page 83).
Modifying Target Systems
You may want to set up each system to grant administrative access to the SD-UX controller while
restricting access to other systems and users.
You will need to modify ACLs on your target systems in the following cases:
• To change the login name of the SD-UX administrator (the default is root).
• To modify permissions for the SD-UX administrator or group of administrators.
The swacl Command
The swacl command lets you view or change ACL entries and permissions.
swacl Syntax
swacl -l level [-D acl_entry|-F acl_file|-M acl_entry]
[-f software_file][-t target_file]
[-x option=value] [-X option_file]
[software_selections] [@ target_selection]
Options and Operands
-l level Level to edit. Level designations are the literals: host, depot, root, product,
product_template, global_soc_template or
global_product_template. (See “ACL Templates ” (page 155) for a complete
discussion.)
NOTE: You can change an ACL with -D, -F, or -M command options. You can only specify one
of these options per command because they are mutually exclusive. If you don’t specify a -D, -F,
or -M option, swacl prints the specified ACLs.
-D acl_entry Deletes an existing entry from the ACL associated with the specified
object. You can enter multiple -D options.
-F acl_file Assigns the ACL information contained in acl_file to the object.
All existing entries are removed and replaced by the entries in the
file. You can enter only one -F option.
-M acl_entry Adds a new ACL entry or changes the permissions of an existing
entry. You can enter multiple -M options.
-f software_file Reads a list of software selections from a separate file instead of
from the CLI. (See “Software Files” (page 36).)
-t target_file Reads a list of target host selections from a separate file instead of
from the CLI. (See “Target Files” (page 37).)
-x option=value Lets you change an option on the command line interface (CLI) that
overrides the default value or a value in an alternate options file
(-X option_file). See “Changing Command Options” (page 143).
142 SD-UX Security