System Security: Learn to install patch packages for the Solaris System

The most important thing for system security problems is to install patches, install security tools, and uninstall problematic software in a timely manner. In a Windows operating system, you can install or uninstall the software through "Control Panel → Add/delete programs", and the patches can also be automatically updated, however, in the Solaris system, all of this must be done manually by the Administrator. The following describes how to install patches and software packages for the Solaris system.
Install patches

There are many patches for different Solaris operating systems on the http://sunsolve.sun.com, you can download a specific patch, you can also download SUN Recommended Patch package. Because the file needs to be updated during patch installation, it is generally best to go to the single-user mode or pause the related service process in multi-user mode to install the patch, and read the readme file of the related patch.

(1) install and uninstall a single patch

A single patch released by SUN for a problem or defect is generally named in the format of "major patch version number-patch revision number". For example, 116973-xx is a series of patches for Apache, 116973 is the main patch version, xx is the patch revision number for Apache, 01 indicates that it is the first patch, and 02 is a new fix on the basis of 01.

Bash-2.05 # unzip 116973-01.zip // Extract
Bash-2.05 # patchadd 116973-01 // install the patch and call the pkgadd command to install the patch
Bash-2.05 # patchrm 116973-01 // uninstall the patch by calling the pkgadd command to restore the file backup before the patch is installed to uninstall the patch
 

(2) install the patch package

If you do not know which specific patch to upgrade, you can also select a patch package recommended by SUN for this operating system.

Bash-2.05 # unzip 8_Recommended.zip // Extract
Bash-2.05 # cd 8_Recommended // enter the Directory
Bash-2.05 #./install_cluster // start the installation process
 

(3) Check for existing Patches

The/var/sadm/install_data/Solaris_8_Recommended_log file records detailed patch installation logs. the/var/sadm/patch directory lists all installed patches. As follows:

The following two commands can display the currently installed patch:

Bash-2.05 # showrev-p
Bash-2.05 # patchadd-p
 

Install software package

There are a lot of software packages on http://www.sunfreeware. com/And you can download the latest software packages for installation as needed.

(1) view installed software information

Bash-2.05 # pkginfo | more // displays the software packages installed in the system. For details, add the parameter "-l"
 

(2) uninstall the software

Bash-2.05 # pkgrm // display the software packages installed in the system. Uninstall the earlier version bash2.05.

The following packages are available:
1 NSCPcom Netscape Communicator
(ISCSI) 255.4.70, REV = 1999. 10.13.17.54
2 NSCPcpcom Simplified Chinese (Common) Netscape Communicator
(ISCSI) 2.164.70, REV = 1999. 11.18.10.49
.......
10 SMCtop
(ISCSI) 3.5beta9
<RETURN> for more choices, <CTRL-D> to stop display: ^ D
// The system has installed a total of 324 software, with CTRL-D no longer show
Select package (s) you wish to process (or all to process all packages). (default: all )[?,??, Q]: 3
// Uninstall the software with serial number 3, that is, bash2.05
.......
 

(3) install software

The following packages are available:
1 SMCbash bash
(ISCSI) 3.0
Select package (s) you wish to process (or all to process all packages). (default: all )[?,??, Q]: 1
// Install software with serial number 1, that is, bash3.00
Installation of <SMCbash> was successful.
 

The above briefly introduces how to install the Solaris system patch and software package. After the Solaris operating system is installed, install patches for the system to fix system security vulnerabilities. If the software installed with the operating system is limited or the version is low, you can install and upgrade the software program to make the system easier for administrators.