pprosvc(1M) System Administration Commands pprosvc(1M)NAMEpprosvc - automation service program for Patch Manager
SYNOPSIS
/usr/sbin/pprosvc [-c config-name] [-d [-p patch-id [,patch-id...]]]
[-h] [-i [-n] [-p patch-id [,patch-id...]]] [-l]
DESCRIPTION
Note - This command is deprecated. Use the smpatch analyze, smpatch
download, and smpatch update commands instead. See the
smpatch(1M) man page.
Use the pprosvc command to analyze a system to determine the list of
appropriate patches, download the patches, and apply them. This command
invokes patch operations in response to a user request or at a sched‐
uled time. You must run this command as superuser.
The pprosvc command enables you to do the following:
· Analyze the host system for appropriate patches based on an estab‐
lished configuration
· Generate the list of appropriate patches
· Download the patches to your host system from the Sun patch server
· Apply the patches based on a patch policy
Use the pprosvc-i command to analyze a system, download the appropri‐
ate patches, and apply them. If analysis determines that patches are
needed, the pprosvc command downloads them and applies them.
Specify other options to automate a subset of the patch management
tasks. If you specify the -d option, your system is analyzed and the
appropriate patches are downloaded to your system. If you specify the
-l option, your system is analyzed and the appropriate patches are
listed.
The list of patches that is generated by the analysis is based on all
of the available patches from the Sun patch server. No explicit infor‐
mation about your host system or its network configuration is transmit‐
ted to Sun. Only a request for the Sun patch set is transmitted. The
patch set is scanned for patches that are appropriate for this host
system, the results are displayed, and those patches are optionally
downloaded.
The -d, -i, and -l options are mutually exclusive.
Use the -p option to specify the patches on which to operate. You can
use the -p option with the -d and -i options.
OPTIONS
The following options are supported:
-c config-name Uses an alternate configuration for the current
patch operation. Use the pprosetup command to
create new configurations.
A configuration named recommended is included.
For more information, see ``Specifying Alter‐
nate Configurations'' in the pprosetup(1M) man
page.
Note - This feature is not supported by the
smpatch command.
-d Downloads the patches that are appropriate for
this host system. The patches are downloaded to
the designated download directory.
This option generates a list of appropriate
patches, as does the -l option. However,
instead of just displaying the list of patches,
the -d option displays and downloads the
patches from the Sun patch server. The patches
are downloaded using a secure connection, and
all patches are authenticated using digital
signature technology. Only patches that are
signed with a Sun digital signature are stored
in your download directory.
Note - Specifying this option is equivalent to
running the smpatch download command.
-h Displays information about the command-line
options.
-i Applies the patches based on the patch policy.
This option analyzes your system to generate a
list of appropriate patches. If analysis deter‐
mines that patches are needed, the patches are
downloaded and applied. If no patches are per‐
mitted to be applied in automatic mode (by run‐
ning pprosetup -p none), this option is identi‐
cal to specifying the -d option.
If only standard patches are permitted to be
applied in automatic mode (by running pprosetup
-p standard), all standard patches are applied.
Note - Specifying this option is equivalent to
running the smpatch update command.
-l Generates a list of the patches that are appro‐
priate for this host system.
Note - Specifying this option is equivalent to
running the smpatch analyze command.
-n Runs pprosvc in automatic mode. The command
that the cron job specifies is pprosvc-i -n.
To schedule patch operations to run in auto‐
matic mode, see the pprosetup(1M) man page.
In automatic mode, the patch administrator
(specified by the -a option) receives email
notifications that describe the patches you
downloaded and applied, and any error events
that occurred.
Do not use this option on the command line.
Standard patches do not require any special
actions on the part of the user. Such patches
can be applied by using the patchadd command
(see the patchadd(1M) man page) and do not need
the host system to reboot for the patch to take
effect.
All nonstandard patches are moved to the
sequester directory if you use the -n option to
run in automatic mode. If you run in manual
mode, however, nonstandard patches that have
properties that match the policy specified by
pprosetup -i are applied. The rest of the non‐
standard patches are moved to the sequester
directory. You can apply patches from this
directory at a later time. Patches, whether
standard or nonstandard, that depend on
sequestered patches are not applied under any
circumstances. Such patches are placed in the
sequester directory.
For any patch that is placed in the sequester
directory, refer to the patch's README file to
determine how to apply it to your system.
Note - This feature is not supported by the
smpatch command.
-p [patch-id[,patch-id,.Designates the specific patches on which to
operate. Use this option with the -d option or
the -i option. The list of patch IDs must be
separated by commas.
The specified patches are adjusted to use the
current versions based on the patch baseline.
Patches that are required by the specified
patches are added to the complete list of
patches to be applied.
Note - Specifying this option is equivalent to
specifying the -i option to the smpatch
analyze, smpatch download, and smpatch
update commands.
EXAMPLES
Example 1: Applying Specific Patches in Manual Mode
# pprosvc-i -p 102893-01,106895-09,106527-05
Applies patches 102893-01, 106895-09, and 106527-05 to the local system
in manual mode.
Example 2: Analyzing a System and Downloading Appropriate Patches
# pprosvc-i
Performs an analysis of the current system and downloads the appropri‐
ate patches based on all the patches from the Sun patch server. The
resulting list of patches can be very long.
Example 3: Applying Patches From the Recommended Configuration
# pprosvc-c recommended -i
Uses the recommended configuration to perform an analysis of the cur‐
rent system and downloads the appropriate patches. Standard patches and
those needed from the recommended configuration are applied to the sys‐
tem based on the established patch policy. For information about set‐
ting the patch policy for manual mode, see the description of the -i
option on the pprosetup(1M) man page.
ATTRIBUTES
See the attributes(5) man page for descriptions of the following
attributes:
┌─────────────────────────────┬─────────────────────────────┐
│ ATTRIBUTE TYPE │ ATTRIBUTE VALUE │
├─────────────────────────────┼─────────────────────────────┤
│Availability │SUNWpprou │
├─────────────────────────────┼─────────────────────────────┤
│Interface Stability │Obsolete │
└─────────────────────────────┴─────────────────────────────┘
SEE ALSOpatchadd(1M), patchrm(1M), pprosetup(1M), smc(1M), smpatch(1M),
attributes(5)SunOS 5.10 7 May 2004 pprosvc(1M)
