Job Management Partner 1/Client Security Control Description, User's Guide and Operator's Guide

16.11 Patch update condition file

This file is used in the -f option of the judgment policy update command for security updates (cscpatchupdate). It defines the conditions for updating patch information by specifying information such as the release date of the patch and the OS to which it applies. The file also defines security levels tied to the priority of the patch. Create the file with any file name in any directory.

Organization of this section

(1) Synopsis

(2) Definition contents

(3) Specification example

(1) Synopsis

 
Patch_Release_Start=release-date-(start) 
Patch_Release_End=release-date-(end) 
Patch_Release_Period=release-period 
Patch_Product=product-type 
Patch_Class=class 
Patch_OS=target-OS 
Patch_Serious=severity-rating 
Patch_Update_Cond=update-condition 
Patch_Version=processing-dependent-on-patch-information-file-version 
Patch_Delay=update-delay-time 
Patch_Emergency=security-level-setting-(critical) 
Patch_Importance=security-level-setting-(important) 
Patch_Warning=security-level-setting-(moderate) 
Patch_Caution=security-level-setting-(low) 
Patch_Nothing=security-level-setting-(unspecified)

Legend: [Figure] : Line feed code

(2) Definition contents

The following table shows the contents set in this file.

Table 16-40 Contents of a patch update condition file

No. Parameter Setting item Setting value

1 Patch_Release_Start Release date (start) Specify the first and last release dates, in the format YYYY/MM/DD.
If you specify only a start date, patch information is updated for all patches released since that date.
If you specify only an end date, patch information is updated for all patches released up to that date.
If you specify a start and end date, patch information is updated for all patches released between those dates.
If you omit both dates, patch information is updated for all patches regardless of their release dates.

2 Patch_Release_End Release date (end)

3 Patch_Release_Period Release period Specify a release period as a numeral from 0 to 100.
Patch information will be updated for all patches whose release date falls within the specified number of days from when the command was executed.
If you specify a release date in the patch update condition file, the release period is ignored.
When omitted, patch information is updated for all patches regardless of when they were released.

4 Patch_Product Product type Specify the product types for which to update patch information.
0: All (OS and software products)
1: OS
2: Software products
When omitted, patch information is updated for operating systems and software products.

5 Patch_Class Class Specify one or more classes of patch for which to update patch information.
0: All patches
1: Critical updates
2: Security updates
8: Security rollups
When omitted, patch information is updated for security updates.

6 Patch_OS Target OS Specify one or more operating systems for which to update patch information.
0: All
1: Windows 2000
2: Windows XP
4: Windows Server 2003
8: Windows Server 2003 Datacenter
16: Windows Vista
32: Windows Server 2008
64: Windows 7
128: Windows Server 2008 R2
When omitted, patch information is updated for all operating systems.

7 Patch_Serious Severity rating Specify one or more patch severity ratings for which to update patch information.
0: All
1: Critical
2: Important
3: Moderate
4: Low
5: Unspecified
When omitted, patch information is updated for patches whose severity rating is critical or important.

8 Patch_Update_Cond Update condition Specify whether to update patch information only for patches added since the last time the command was executed.
0: Only patches added since last execution
1: All patches
If you omit this setting, patch information is updated only for patches added since the last time the command was executed.
If you set a release period that predates the last time the command was executed, specify 1 for this item.

9 Patch_Version Processing dependent on patch information file version Specify whether to update patch information if the patch information file has not changed since the last time the command was executed.
0: Do not update patch information.
1: Update patch information.
When omitted, patch information is not updated.

10 Patch_Delay Update delay time Specify an update delay time, as a numeral from 0 to 100.
Processing is executed after the specified number of days have elapsed from the date of the patch information file.
If you do not specify an update delay time, patch information is updated without delay.

11 Patch_Emergency Security level setting (critical) The security level to assign to patches whose severity rating is critical. Specify one of the following codes:
200: Caution
300: Warning
400: Danger
When omitted, 300 (Warning) is set.

12 Patch_Importance Security level setting (important) The security level to assign to patches whose severity rating is important. Specify one of the following codes:
200: Caution
300: Warning
400: Danger
When omitted, 300 (Warning) is set.

13 Patch_Warning Security level setting (moderate) The security level to assign to patches whose severity rating is moderate. Specify one of the following codes:
200: Caution
300: Warning
400: Danger
When omitted, 200 (Caution) is set.

14 Patch_Caution Security level setting (low) The security level to assign to patches whose severity rating is low. Specify one of the following codes:
200: Caution
300: Warning
400: Danger
When omitted, 200 (Caution) is set.

15 Patch_Nothing Security level setting (unspecified) The security level to assign to patches whose severity rating is unspecified. Specify one of the following codes:
200: Caution
300: Warning
400: Danger
When omitted, 200 (Caution) is set.

Note the following coding conventions:

Lines beginning with a hash symbol (#) are treated as comments.

End every line with a line feed code. The line feed code is 0x0d0a. Lines containing only a line feed code are ignored.

No.	Parameter	Setting item	Setting value
1	Patch_Release_Start	Release date (start)	Specify the first and last release dates, in the format YYYY/MM/DD. If you specify only a start date, patch information is updated for all patches released since that date. If you specify only an end date, patch information is updated for all patches released up to that date. If you specify a start and end date, patch information is updated for all patches released between those dates. If you omit both dates, patch information is updated for all patches regardless of their release dates.
2	Patch_Release_End	Release date (end)
3	Patch_Release_Period	Release period	Specify a release period as a numeral from 0 to 100. Patch information will be updated for all patches whose release date falls within the specified number of days from when the command was executed. If you specify a release date in the patch update condition file, the release period is ignored. When omitted, patch information is updated for all patches regardless of when they were released.
4	Patch_Product	Product type	Specify the product types for which to update patch information. 0: All (OS and software products) 1: OS 2: Software products When omitted, patch information is updated for operating systems and software products.
5	Patch_Class	Class	Specify one or more classes of patch for which to update patch information. 0: All patches 1: Critical updates 2: Security updates 8: Security rollups When omitted, patch information is updated for security updates.
6	Patch_OS	Target OS	Specify one or more operating systems for which to update patch information. 0: All 1: Windows 2000 2: Windows XP 4: Windows Server 2003 8: Windows Server 2003 Datacenter 16: Windows Vista 32: Windows Server 2008 64: Windows 7 128: Windows Server 2008 R2 When omitted, patch information is updated for all operating systems.
7	Patch_Serious	Severity rating	Specify one or more patch severity ratings for which to update patch information. 0: All 1: Critical 2: Important 3: Moderate 4: Low 5: Unspecified When omitted, patch information is updated for patches whose severity rating is critical or important.
8	Patch_Update_Cond	Update condition	Specify whether to update patch information only for patches added since the last time the command was executed. 0: Only patches added since last execution 1: All patches If you omit this setting, patch information is updated only for patches added since the last time the command was executed. If you set a release period that predates the last time the command was executed, specify 1 for this item.
9	Patch_Version	Processing dependent on patch information file version	Specify whether to update patch information if the patch information file has not changed since the last time the command was executed. 0: Do not update patch information. 1: Update patch information. When omitted, patch information is not updated.
10	Patch_Delay	Update delay time	Specify an update delay time, as a numeral from 0 to 100. Processing is executed after the specified number of days have elapsed from the date of the patch information file. If you do not specify an update delay time, patch information is updated without delay.
11	Patch_Emergency	Security level setting (critical)	The security level to assign to patches whose severity rating is critical. Specify one of the following codes: 200: Caution 300: Warning 400: Danger When omitted, 300 (Warning) is set.
12	Patch_Importance	Security level setting (important)	The security level to assign to patches whose severity rating is important. Specify one of the following codes: 200: Caution 300: Warning 400: Danger When omitted, 300 (Warning) is set.
13	Patch_Warning	Security level setting (moderate)	The security level to assign to patches whose severity rating is moderate. Specify one of the following codes: 200: Caution 300: Warning 400: Danger When omitted, 200 (Caution) is set.
14	Patch_Caution	Security level setting (low)	The security level to assign to patches whose severity rating is low. Specify one of the following codes: 200: Caution 300: Warning 400: Danger When omitted, 200 (Caution) is set.
15	Patch_Nothing	Security level setting (unspecified)	The security level to assign to patches whose severity rating is unspecified. Specify one of the following codes: 200: Caution 300: Warning 400: Danger When omitted, 200 (Caution) is set.

(3) Specification example

 
Patch_Release_Start=2007/03/01 
Patch_Release_End=2008/03/31 
Patch_Release_Period=0 
Patch_Product=0 
Patch_Class=0 
Patch_OS=0 
Patch_Serious=0 
Patch_Update_Cond=0 
Patch_Version=0 
Patch_Delay=0 
Patch_Emergency=400 
Patch_Importance=400 
Patch_Warning=300 
Patch_Caution=200 
Patch_Nothing=200

[Contents][Back][Next]

[Trademarks]

All Rights Reserved. Copyright (C) 2009, 2011, Hitachi, Ltd.
Copyright, patent, trademark, and other intellectual property rights related to the "TMEng.dll" file are owned exclusively by Trend Micro Incorporated