How to Customize Whitelists and Blacklists

This task describes how to configure and modify TLP whitelists and blacklists. Patches in the whitelist file are added to patch sets. Patches in the blacklist file are removed from the patch sets. This procedure shows how to modify the whitelist file. The same steps are applicable when modifying a blacklist file.

Steps

1. Log in to the TLP server as the tlp-user.

2. Using a text editor, open the whitelist file for editing.

   The location of the whitelist and blacklist files is configured in the patchdiag section of the tlp.cfg file. The default locations for these lists are:

   • /opt/SUNWtlp/conf/whitelist.cfg

   • /opt/SUNWtlp/conf/blacklist.cfg

3. Add patches to the list.

   The whitelist and blacklist files include many examples. See TLP Whitelists and Blacklists for more details.

   1. Copy the most appropriate example. Remove the hash mark (#) from the beginning of the line.

   2. Adjust the values accordingly.

   You can add patches for all of the systems in the data center or for a subset of systems. Subsets are selected by keys, which are known by using the uname command. The following information about the operating system is provided:

   • Name

   • Version

   • Architecture

   • System type

4. Save the changes.

   The changes take effect when the next patch sets is created. See How to Create Individual TLP Patch Sets.

Example 2–8 Configuring a Whitelist

The following example shows a whitelist configuration.

<Module patchdiag>
Class Tlp::Resolver::PatchDiag

       # List of patches to be ignored
       BlackList $BaseDirectory/conf/patches.black

       # Default white list of patches which should be always 
       # installed:
       WhiteList $BaseDirectory/conf/patches.white

       # Additional list of patches which should be added for sure
       # WhiteList ./patches.white
</Module>

For an example of a blacklist configuration, see Example 3–1.