Software Distributor (SD-UX) Administration Guide HP-UX 11i v1, 11i v2, and 11i v3 (762797-001, March 2014)

that users inserting a product may also write (modify and delete) it, and so that it may be read
only by the known test systems.
Similarly, test roots may be created, perhaps on other test hosts, to which developers may install
test products. Access to install to the test root should be restricted to the development group.
When testing is complete and a product is ready for release, the product may then be copied to
a general distribution depot to make it more widely readable without exposing all the untested
products on the test depot.
There are many additional ways in which these basic concepts may be used to implement a desired
security policy for product development.
Permission Requirements, by Command
Packaging (swpackage)
• If the depot does not exist, swpackage verifies that the user has insert permission on the target
host.
• swpackage verifies that the user has insert permission on a target depot.
• swpackage verifies that the user has write permission on target product, if it already exists.
Listing (swlist)
• To list potential depots, the source agent verifies that the controller user has read permission
on host.
• To list potential products, the source agent verifies that the controller user has read permission
on depot or root.
Job Browsing (sd, swjob)
• To use the CLI (swjob) or GUI (sd) to view information about jobs initiated from a local host,
the controller verifies that the user has read permission on the host.
• To use the command line or GUI to retrieve a target log file, the target agent verifies that the
controller user has read access on the root or depot target.
Copying (swcopy)
• Any list operations required to facilitate this function must be checked as described in the
swlist section above.
• If the depot does not exist, swcopy verifies that the user has insert permission on the target
host.
• The target agent verifies that the controller user has insert permission on the target depot.
• The target agent verifies that the controller user has write permission on the target product, if
it already exists.
• The source agent verifies that the target agent system has read permission on the source
product.
• The source (depot) agent verifies that the depot is registered. If not, the agent verifies that the
controller user and the target agent system each has insert permission on the source’s host.
Installing (swinstall)
• Any list operations required to facilitate this function must be checked as described in the
swlist section above.
• The target agent verifies that the controller user has insert permission on the target root.
Permission Requirements, by Command 163