I am trying to determine patch levels and how long some Solaris machines have been without patching in order to support triaging which systems to patch first. How can I determine the last time a Solaris machine was patched?
|
feedback
|
|
Well, don't know any good direct ways, but these might help. 'showrev -p' will tell you all the installed patches. And I guess the dates in /var/sadm/pkg would be from the last time the packages were modified (or patched). | |||||
feedback
|
|
I dunno about determinng the last time a solaris box was patched, but you can work out the patch level with showrev -p | |||
|
feedback
|
|
I'll agree with the above showrev -p comments and add that uname -a to get the kernel version is also useful to give a general picture. | |||
|
feedback
|
|
You should check first /etc/release that shows which version of Solaris was originally installed, then check with 'uname -a' which kernel patch are you currently using (it's the number XXXXXX-XX that shows up) then start comparing the kernel patches with the other machines, the kernel patch is a critical component so a newer kernel patch usually means a more up to date system in almost every aspect. And then if you're not a faint of heart you can use the (unofficial) PCA tool to update your systems automatically just by providing a valid SunSolve account. | |||
|
feedback
|