4.7.4 Approvals Page Actions - VulnDetect Technical Guide
On the Approvals page, on the Applications tab are 5 buttons:
Automate Selected Approvals, Approve Version in Selected Approvals, Set selected Approvals to Block Updates, Set Selected Approvals to Inherit and Edit Selected Approval.
But unlike the other sections we will also be focusing on how Approve approvals for designated Groups and Tags.
Automate Selected Approvals
On the Approvals page you can choose to automate application updates.
When a new version of an application is available, Groups & Tags that have this automatic approval will automatically get the new version, meaning all the underlying hosts will be updated.
Approve Version In Selected Approvals
On the Approvals page you can choose to manually update applications.
Approving an update through this makes the Groups & Tags that are selected approved to get the latest update. Later when a newer update is released, the approval will turn into “Out-of-Date,” meaning it is waiting for another manual approval.
Set Selected Approvals to Block Updates
On the Approvals page you can choose to block application updates.
Setting the approval for an application to block makes it so the hosts that are affected no longer will receive updates for that application. Even if said hosts belong to another Tag that has an automatic approval, then block will take precedence and block the update.
Set Selected Approvals to Inherit
On the Approvals page you can choose to inherit approval state from the application approval.
When used the inherit approval will become whichever approval is chosen for the overlying application; if the application itself is set to automatic, then the underlying Groups & Tags with inherit will also be automatic.
If the inherit approval is used in top most layer, it will turn into “No Default,” which means no patching rules are defined.
Group Approvals & Tag Approvals
On the Approval page you can expand each Application to display a list of groups and Tags with the respective approval action.
To apply an update to a Group or a Tag:
*A group or Tag will only appear in the approval list for an application if at least one host assigned to that group or Tag has the application installed.
- To the left of the applications name click the Arrow to show the list of Groups and Tags that have approvals for the chosen applications
- Click on a group- or name Tag to open the approvals, to view all the applications
- The list shown is all the Applications withtin that specific group or Tag for which here you can approve updates for selected Group or Tag
- From Group Approvals
Edit Selected Approval
Herein an alternate installer can be uploaded, installer arguments can be modified and additional files can be added.
If your approvals page is empty, it’s because, a group or Tag will only appear in the approval list for an application if at least one host assigned to that group or Tag has the application installed.