[pca] Hurray to PCA and We Sun Solve! They have spared me numerous hours of tedious work

[Fay, Sean]

One wish I have though is perhaps there is a way to mass load a patch list on the site. For instance, I had approximately 70 patches to input and it seemed to take a considerable amount of time and clicking. If I had the patches I want (with patch number and level) in a specific format, I would think it easy to implement a load from file type operation. 

Just a thought.

Thanks

Sean

-----Original Message-----
From: Thomas Gouverneur [mailto:tgo at espix.net] 
Sent: Thursday, April 19, 2012 9:59 AM
To: PCA (Patch Check Advanced) Discussion
Cc: Fay, Sean
Subject: Re: [pca] Hurray to PCA and We Sun Solve! They have spared me numerous hours of tedious work

Sean,

Thumbs up!

Thanks for the feedback! This is always good stuff to read!

It's also good to know and confirm that the patchdiag.xref generation is working, since I didn't get much feedback (except from martin and tests I made myself) since it's implementation ;)


Kind Regards,

Thomas


On Thu, 19 Apr 2012 14:44:01 +0000
"Fay, Sean" <sean.fay at hp.com> wrote:

> Hello everyone my name is Sean and I am a Solaris admin.
> 
> Recently I was given the task of remediating a vast list of scanned 
> vulnerabilities on about 60 servers (with a mix of non-global zones).
> However since the scan was run I have gone through and patched (using 
> Recommended patch set September 2011). The scan did not show that of 
> course, and it was looking like I would have to showrev each and every 
> patch and check on each and every server (gasp!). With some 
> "Google-fu" I found the PCA page and after reading through the 
> documentation I was unsure if it would do what I had in my head I 
> needed, so an email went off to Martin and he graciously replied.
> 
> I was pointed over to We Sun Solve! (wesunsolve.net) and told that "in 
> theory" I should be able to create a custom patchdiag.xref file there, 
> and use the PCA tool to "scan" against it rather than the Oracle xref 
> file (which is much newer than the list of patches the scan tool 
> uses). Martin explained that it *should* work but obviously my mileage 
> may vary. So with great determination I set out first documenting the 
> patches the scan tool checks, then using those patches (about 70) to 
> creat a custom patch list on wesunsolve.net and had it create the xref 
> file.
> 
> You will be happy to know (in case you haven't already guessed) that 
> it worked like a champ.
> 
> Thank you so much Martin and Thomas, it worked great.
> 
> Sean


--
Thomas Gouverneur
 _____           _      
| ____|___ _ __ (_)_  __
|  _| / __| '_ \| \ \/ /
| |___\__ \ |_) | |>  <
|_____|___/ .__/|_/_/\_\
 Network  |_|       SPRL
   TVA: BE6836018011

T: +32 498 23 00 40
W: http://espix.net
M: <thomas at espix.net>