Does not ignore updates marked as ignored

[GoogleCodeExporter]

What steps will reproduce the problem?
1. Run "softwareupdate --ignore <updatename>" at the command line to ignore an 
available Apple Software Update.
2. Run "managedsoftwareupdate" at the command line, or open "Managed Software 
Update" GUI
3. Ignored update shows as available and required to install.

What is the expected output? What do you see instead?

Updated ignored by the Apple Software Update process should not be installed by 
Munki. The /Library/Managed Installs/swupd/ApplicableUpdates.plist file shows 
the update being marked as ignored, but still prompts the end user to update.

What version of the Munki tools/InstallOSpkg tools are you using? On what
version of OS X?
Mac OS X 10.6.8
Munki Tools 0.9.0.1797

Please provide any additional information below.

Original issue reported on code.google.com by emailasa...@gmail.com on 1 Oct 2013 at 7:11

[GoogleCodeExporter]

Munki _calls_ `softwareupdate -l` to get the list of available updates. So this 
must be reproducible outside of Munki. Is the list of ignored updates stored in 
the current user's preferences domain?

(You should look into using Apple's SUS on OS X Server or using Reposado to 
control which updates are offered to your clients -- managing that by using 
softwareupdate --ignore doesn't seem very scalable...)

Original comment by gregnea...@mac.com on 1 Oct 2013 at 7:17

[GoogleCodeExporter]

I think I see the source of the issue; I'll see if I can get a test fix out 
this afternoon.

Original comment by gregnea...@mac.com on 1 Oct 2013 at 7:32

[GoogleCodeExporter]

I believe this is fixed here: 
http://code.google.com/p/munki/source/detail?r=0ba24a169b4a

Original comment by gregnea...@mac.com on 1 Oct 2013 at 9:29

• Changed state: Fixed

[GoogleCodeExporter]

You're right, using --ignore is not very scalable, but what we've got is
machines that were imaged with a pre-firmware update image (so the OS
thinks there's a needed firmware update), but the update has already been
applied so the updater won't actually run. The required receipts are not in
place, dependencies are not satisfied, so users are getting prompted
constantly by Managed Software Update for an update they don't need. I
don't want to disable it on the internal software updates server in case of
machines that legitimately do need it, so telling the handful of affected
ones to ignore it makes more sense. Running "softwareupdate --list" returns
"no updates available" (properly ignoring the firmware update I told it to
ignore), and running the Software Update GUI under the Apple Menu also
correctly says no updates. Munki seems to be a bit more tenacious,
presenting users with a required update that should be ignored, and Mac OS
X's internal stuff does properly ignore. I had assumed, as you mentioned,
that the built-in "softwareupdate" was being used to populate Munki's list
of available Apple updates, but even with softwareupdate returning no
available updates, and deleting "/Library/Managed Installs" to let Munki do
a complete re-discover of available updates still gets around the ignore
list.

Original comment by emailasa...@gmail.com on 1 Oct 2013 at 10:06

[GoogleCodeExporter]

Whoops I hit reply to the initial response before I read all the comments, 
sorry! Yes, revision 0ba24a169b4a fixes it nicely, thanks!

Original comment by emailasa...@gmail.com on 1 Oct 2013 at 11:03