Put Appropriate Actions in the Ignore File

It might make sense for you to ignore the following types of issues:

Manual actions — SWA can't detect if security bulletin manual actions (other than installing specific versions of patches or software) have been taken, so after applying a manual action, add it to the ignore file to track that the action has been taken.
Deferred actions — If you've made a decision to defer addressing a particular issue for some period of time, after taking into account the risk of not addressing it, you might wish to add it to the ignore file until the issue is revisited or fixed. Be careful not to forget about these types of issues, since SWA will stop warning about them.

HP advises you include comments in the ignore file explaining who added an issue, why, and when. Auditors are likely to want this information documented and traceable.

The ignore file, $HOME/.swa/ignore, includes comments with instructions regarding syntax and how to add an issue. You must use the Issue ID given in the Detail report to identify issues in an ignore file.

It is possible to use more than one ignore file with the following syntax:

# swa report -x ignore_file="file1 file2"

Put Appropriate Actions in the Ignore File

Technical documentation

» Table of Contents

» Glossary

» Index