<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style>
<!--
@font-face
{font-family:Calibri}
@font-face
{font-family:Tahoma}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
p
{margin-right:0in;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif"}
span.EmailStyle18
{font-family:"Arial","sans-serif";
color:#091FBF;
font-weight:normal;
font-style:normal}
.MsoChpDefault
{font-size:10.0pt}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
-->
</style>
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#091FBF">I think I can explain what is happening. The Age column is simply when the patch was originally released. Not when it first became recommended.</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#091FBF">In some cases, the patch could be released for a long time without the recommended flag set; then at a later time the recommended flag could be set.</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#091FBF">When this happens the “-l” list report will show a high “Age” value for the patch that is now recommended, but was not previously installed due to it not being
recommended at the previous patch cycle.</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#091FBF"> </span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#091FBF">Here is an actual example from my own server which was patched less than 4 months ago:</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Courier New"; color:#091FBF">Patch IR CR RSB Age Synopsis</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Courier New"; color:#091FBF">145953 06 < 07 R-- 455 Obsoleted by: 149173-03 SunOS 5.10: emlxs driver Patch</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#091FBF"> </span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#091FBF">It now recommends a patch with an Age of 455.</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#091FBF">I can assure you that this patch did exist 4 months ago -- but it was not Recommended at that time; which is why it was not installed back then.</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#091FBF"> </span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#091FBF">You need to tell your auditors that its normal when this happens and it doesn’t prove that any patches were missed at the last cycle.</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#091FBF">You need to run the PCA report using the patchdiag from when the patches were last installed -- then you will see that none were missed.</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#091FBF">When I run PCA on my server with the patchdiag from 4 months ago, it doesn’t say I’m missing
</span><span style="font-size:10.0pt; font-family:"Courier New"; color:#091FBF">145953. In fact, it correctly says that no patches are missing:</span><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#091FBF"></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#091FBF"> </span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#091FBF">Using /<censored>/patchdiag.xref from Mar/03/13
</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#091FBF">Host: <censored></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#091FBF">List: missingr-minimal (0/0)</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#091FBF"> </span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#091FBF">If I show my auditors the above empty report, they are happy that no patches are missing.</span></p>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#091FBF"> </span></p>
<div>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:8.0pt; font-family:"Arial","sans-serif"; color:#091FBF">Neil G. Brookins<br>
Identity and Authentication Solutions - IT Global Solutions</span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:8.0pt; font-family:"Arial","sans-serif"; color:#091FBF">Towers Watson</span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:8.0pt; font-family:"Arial","sans-serif"; color:#091FBF">1500 Market Street | Philadelphia, PA 19102</span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:8.0pt; font-family:"Arial","sans-serif"; color:#091FBF">Phone: +1 215 246 6046</span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:8.0pt; font-family:"Arial","sans-serif"; color:#091FBF"><a href="mailto:neil.brookins@towerswatson.com"><span style="color:blue">neil.brookins@towerswatson.com</span></a></span></p>
</div>
<p class="MsoNormal"><span style="font-size:10.0pt; font-family:"Arial","sans-serif"; color:#091FBF"> </span></p>
<div>
<div style="border:none; border-top:solid #B5C4DF 1.0pt; padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt; font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt; font-family:"Tahoma","sans-serif""> pca-bounces@lists.univie.ac.at [mailto:pca-bounces@lists.univie.ac.at]
<b>On Behalf Of </b>Terry Bohaning<br>
<b>Sent:</b> Thursday, August 08, 2013 12:02 PM<br>
<b>To:</b> pca@lists.univie.ac.at<br>
<b>Subject:</b> [pca] --minimal -l missingr not working as expected</span></p>
</div>
</div>
<p class="MsoNormal"> </p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">Greetings!</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">I wondered if anyone has seen this behavior before? I've been thru the archives and have not found anything that helps so far.</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">I'm running a remote data collection of all of the Solaris clients in my environment and storing them off on a directory in my machine running Red Hat.</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">What I'm seeing is this.</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">pca -f ./ahost_ --minimal -l missingr</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">and it consistently returns patches that are not in the recommended set. A sample is below:</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">List: missingr-minimal (105/32541)</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">Patch IR CR RSB Age Synopsis</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">------ -- - -- --- --- -------------------------------------------------------</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">118666 34 < 53 RS- 52 JavaSE 5.0: update 51 patch (equivalent to JDK 5.0u51)</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">118667 34 < 53 RS- 52 JavaSE 5.0: update 51 patch (equivalent to JDK 5.0u51), 64bit</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">119059 60 < 61 RS- 435 Obsoleted by: 119059-62 X11 6.6.2: Xsun patch</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">119213 26 < 27 RS- 547 NSS_NSPR_JSS 3.13.1: NSPR 4.8.9 / NSS 3.13.1 / JSS 4.3.2</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">119757 21 < 27 RS- 111 SunOS 5.10: Samba patch</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">119764 06 < 07 RS- 373 Obsoleted by: 119764-08 SunOS 5.10 : ipmitool patch</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">119783 21 < 25 RS- 293 Obsoleted by: 119783-26 SunOS 5.10: BIND patch</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">119810 06 < 07 RS- 387 SunOS 5.10: International Components for Unicode Patch</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">120460 19 < 20 RS- 609 Obsoleted by: 120460-21 GNOME 2.6.0: Gnome libs Patch</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">119812 13 < 16 RS- 435 Obsoleted by: 119812-17 X11 6.6.2: FreeType patch</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">119900 13 < 16 RS- 271 GNOME 2.6.0: GNOME libtiff - library for reading and writing TIFF</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">120543 25 < 31 RS- 70 SunOS 5.10: Apache 2 Patch</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">What concerns me are the lines similar to patch 119213 where the age exceeds the last set of patches that were installed. This is giving my auditors issues
as they keep asking why we are not fully patching the systems.</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">Other than suppressing all patches with dates older than the last patch date, is there any way to not display these patches? Or with PCA is this just an expected
result?</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">Thanks!</span></p>
<p style="margin:0in; margin-bottom:.0001pt"><span style="font-size:9.0pt; font-family:"Courier New"">Terry</span></p>
</div>
<span style="font-family:'Arial'; color:gray; font-size:7.5pt"><em>Notice of Confidentiality</em><br>
This transmission contains information that may be confidential. It has been prepared for the sole and exclusive use of the intended recipient and on the basis agreed with that person. If you are not the intended recipient of the message (or authorized to receive
it for the intended recipient), you should notify us immediately; you should delete it from your system and may not disclose its contents to anyone else.<br>
<br>
</span><span style="font-family:'Arial'; color:gray; font-size:7.5pt"><br>
This e-mail has come to you from Towers Watson Delaware Inc. or Towers Watson Pennsylvania Inc.<br>
</span>
</body>
</html>