[pca] pca -l missing

[French, David]

Paul thanks for the response.  I did come up with a way to handle this.
Instead of 'pca -l missing', I am going to use 'pca -l all'.  This shows
all patches, even obsolete ones.  If they equal ignore.  If they don't,
then I use that list to compare against the alert list from Sun.  

For example, running: pca -l all | grep 137111
Gives this output:

Host: XXXXXXX.intuit.com (SunOS 5.10/Generic_137111-08/sparc/sun4v)
126674 01 = 01 --- 418 Obsoleted by: 137111-05 SunOS 5.10: libssl patch
137091 01 = 01 --- 208 Obsoleted by: 137111-06 SunOS 5.10: arp patch
137111 08 = 08 -S-  40 Obsoleted by: 137137-09 SunOS 5.10: kernel patch

So the info I need is there.  If I look for lines with '<' I get what I
need.

BTW, I see a problem with the --minage now.  I see this now that the new
kernel patch came out.  If I say I want patches at least 14 days old,
shouldn't that be done before the calculation of which patches are
needed?

Taking the recent kernel patch, 137137-09 came out a few days ago, less
than 14.  Even though it obsoletes 137111-08, it came out more than 14
days ago.  Shouldn't it be installed since 137137-09 doesn't show in the
set I have chosen?  Currently, if I chose --minage=14 I end up with no
kernel update.  So if I am at 137111-02 I stay there, which is not what
I would want.

Thanks,
	--Dave

> -----Original Message-----
> From: pca-bounces at lists.univie.ac.at [mailto:pca-
> bounces at lists.univie.ac.at] On Behalf Of Martin Paul
> Sent: Monday, November 17, 2008 2:01 AM
> To: PCA (Patch Check Advanced) Discussion
> Subject: Re: [pca] pca -l missing
> 
> French, David wrote:
> > Anyway, the problem is with the new kernel patch being 137137-09,
the
> > '-l missing' no longer shows that any of the 137111-XX patches are
not
> > applied.   Thus, it looks like an Alert is satisfied when it isn't.
> 
> Hm, follows patch obsoletions and ignores obsoleted patches in the
> missing list. It makes no sense to show patch A as missing, when it
has
> been obsoleted by patch B. The real problem is that the Sun Alert will
> point at a (now) obsoleted patch. It would be interesting to know what
> Sun recommends in such a case - install the obsoleted patch A, or
patch
> B which obsoleted A?
> 
> > So my question is, is there an easy way to get pca to output more
> > information to handle this?  Or am I going to need to do all of the
work
> > myself?
> 
> I don't think that pca (alone) can help you here. It kind of hides
patch
> obsoletions, so the information you need is missing even from its
debug
> output.
> 
> Here's what I would do: Use "showrev -p | sed 's/Requires.*//'" to get
a
> list of all installed patches *plus* the patches obsoleted by
installed
> patches. For each of the Sun Alert patches, see if it's included in
this
> list (check for revisions: installed >= alert). Collect missing
patches
> and use "pca -l $missing" at the end to show all missing alert patches
> with pca. I guess you could pack all this into a 20-line shell or perl
> script.
> 
> Martin.
>