pprosvc(1M)                                               System Administration Commands                                               pprosvc(1M)

NAME

       pprosvc - automation service program for Patch Manager

SYNOPSIS

       /usr/sbin/pprosvc [-c config-name] [-d [-p patch-id [,patch-id...]]] [-h] [-i [-n] [-p patch-id [,patch-id...]]] [-l]

DESCRIPTION

       Note -  This command is deprecated. Use the smpatch analyze, smpatch download, and smpatch update commands instead. See the smpatch(1M) man
               page.

       Use the pprosvc command to analyze a system to determine the list of appropriate patches, download the patches, and apply them.  This  com-
       mand invokes patch operations in response to a user request or at a scheduled time. You must run this command as superuser.

       The pprosvc command enables you to do the following:

         o  Analyze the host system for appropriate patches based on an established configuration

         o  Generate the list of appropriate patches

         o  Download the patches to your host system from the Sun patch server

         o  Apply the patches based on a patch policy

       Use  the  pprosvc -i command to analyze a system, download the appropriate patches, and apply them. If analysis determines that patches are
       needed, the pprosvc command downloads them and applies them.

       Specify other options to automate a subset of the patch management tasks. If you specify the -d option, your system  is  analyzed  and  the
       appropriate  patches  are  downloaded to your system. If you specify the -l option, your system is analyzed and the appropriate patches are
       listed.

       The list of patches that is generated by the analysis is based on all of the available patches from  the  Sun  patch  server.  No  explicit
       information about your host system or its network configuration is transmitted to Sun. Only a request for the Sun patch set is transmitted.
       The patch set is scanned for patches that are appropriate for this host system, the results are displayed, and those patches are optionally
       downloaded.

       The -d, -i, and -l options are mutually exclusive.

       Use the -p option to specify the patches on which to operate. You can use the -p option with the -d and -i options.

OPTIONS

       The following options are supported:

       -c config-name          Uses an alternate configuration for the current patch operation. Use the pprosetup command to create new configura-
                               tions.

                               A configuration named recommended is included. For more information, see ``Specifying Alternate Configurations'' in
                               the pprosetup(1M) man page.

                               Note -  This feature is not supported by the smpatch command.

       -d                      Downloads the patches that are appropriate for this host system. The patches are downloaded to the designated down-
                               load directory.

                               This option generates a list of appropriate patches, as does the -l option. However, instead of just displaying the
                               list  of patches, the -d option displays and downloads the patches from the Sun patch server. The patches are down-
                               loaded using a secure connection, and all patches  are  authenticated  using  digital  signature  technology.  Only
                               patches that are signed with a Sun digital signature are stored in your download directory.

                               Note -  Specifying this option is equivalent to running the smpatch download command.

       -h                      Displays information about the command-line options.

       -i                      Applies  the  patches based on the patch policy. This option analyzes your system to generate a list of appropriate
                               patches. If analysis determines that patches are needed, the patches are downloaded and applied. If no patches  are
                               permitted  to  be  applied in automatic mode (by running pprosetup -p none), this option is identical to specifying
                               the -d option.

                               If only standard patches are permitted to be applied in automatic mode (by  running  pprosetup  -p  standard),  all
                               standard patches are applied.

                               Note -  Specifying this option is equivalent to running the smpatch update command.

       -l                      Generates a list of the patches that are appropriate for this host system.

                               Note -  Specifying this option is equivalent to running the smpatch analyze command.

       -n                      Runs  pprosvc in automatic mode. The command that the cron job specifies is pprosvc -i -n. To schedule patch opera-
                               tions to run in automatic mode, see the pprosetup(1M) man page.

                               In automatic mode, the patch administrator (specified by the -a option) receives email notifications that  describe
                               the patches you downloaded and applied, and any error events that occurred.

                               Do not use this option on the command line.

                               Standard  patches  do not require any special actions on the part of the user. Such patches can be applied by using
                               the patchadd command (see the patchadd(1M) man page) and do not need the host system to reboot  for  the  patch  to
                               take effect.

                               All  nonstandard patches are moved to the sequester directory if you use the -n option to run in automatic mode. If
                               you run in manual mode, however, nonstandard patches that have properties that match the policy specified by ppros-
                               etup  -i  are  applied.  The  rest  of  the nonstandard patches are moved to the sequester directory. You can apply
                               patches from this directory at a later time. Patches, whether standard or nonstandard, that depend  on  sequestered
                               patches are not applied under any circumstances. Such patches are placed in the sequester directory.

                               For any patch that is placed in the sequester directory, refer to the patch's README file to determine how to apply
                               it to your system.

                               Note -  This feature is not supported by the smpatch command.

       -p [patch-id[,patch-id,.Designates the specific patches on which to operate. Use this option with the -d option or the -i option. The  list
                               of patch IDs must be separated by commas.

                               The  specified  patches  are  adjusted  to  use  the current versions based on the patch baseline. Patches that are
                               required by the specified patches are added to the complete list of patches to be applied.

                               Note -  Specifying this option is equivalent to specifying the -i option to the smpatch analyze, smpatch  download,
                                       and smpatch update commands.

EXAMPLES

       Example 1: Applying Specific Patches in Manual Mode

       # pprosvc -i -p 102893-01,106895-09,106527-05

       Applies patches 102893-01, 106895-09, and 106527-05 to the local system in manual mode.

       Example 2: Analyzing a System and Downloading Appropriate Patches

       # pprosvc -i

       Performs  an  analysis  of the current system and downloads the appropriate patches based on all the patches from the Sun patch server. The
       resulting list of patches can be very long.

       Example 3: Applying Patches From the Recommended Configuration

       # pprosvc -c recommended -i

       Uses the recommended configuration to perform an analysis of the current system and downloads the appropriate patches. Standard patches and
       those needed from the recommended configuration are applied to the system based on the established patch policy. For information about set-
       ting the patch policy for manual mode, see the description of the -i option on the pprosetup(1M) man page.

ATTRIBUTES

       See the attributes(5) man page for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE         |      ATTRIBUTE VALUE        |
       +-----------------------------+-----------------------------+
       |Availability                 |SUNWpprou                    |
       +-----------------------------+-----------------------------+
       |Interface Stability          |Obsolete                     |
       +-----------------------------+-----------------------------+

SEE ALSO

       patchadd(1M), patchrm(1M), pprosetup(1M), smc(1M), smpatch(1M), attributes(5)

SunOS 5.10                                                          7 May 2004                                                         pprosvc(1M)