topic Re: how to implement trusted system ? in Operating System - HP-UX

how to implement trusted system ?

Mani K — Sat, 18 Feb 2006 01:38:45 GMT

how to implement trusted system and how effective it will be from the normal with OS hardening ?

Re: how to implement trusted system ?

Yogeeraj_1 — Sat, 18 Feb 2006 02:25:23 GMT

hi mani,

this is something which is documented. Please refer to the following:

http://docs.hp.com/en/B2355-90121/

hope this helps!

kind regards
yogeeraj

Re: how to implement trusted system ?

Faizer — Sun, 19 Feb 2006 01:24:33 GMT

This documnet is for HPUX 10. Does anyone know of a newer version for 11.11 etc.
Thanks
Faizer

Re: how to implement trusted system ?

Patrick Wallek — Sun, 19 Feb 2006 13:40:59 GMT

Check out the "Managing Systems and Workgroups: A Guide for HP-UX System Administrators" here:

HTML: http://docs.hp.com/en/B2355-90950/index.html

PDF: http://pdf2html.pootwerdie.com/pdf2html.php?url=http://docs.hp.com/en/B2355-90950/B2355-90950.pdf

There is a section this manual about Trusted systems.

Re: how to implement trusted system ?

Steven E. Protter — Sun, 19 Feb 2006 22:14:28 GMT

Shalom Mani,

Trusted system does a few good things.

It creates audit reports which security auditors like and lets you find out what activity is going on with your system.

It breaks the passwords up by taking them out of the /etc/passwd and puts them in a lot of smaller files. This makes it harder for a hacker to find the right file to hack. Grabbing the passwd file can be done quickly and stealthily. Then the hacker runs crack against it and comes back later with the passwords for the id's it cracked. Gathering up an bunch of files takes more time and makes it more likely the hacker gets caught.

By itself trusted system helps but is not good enough. You should harden your system by looking for vulnerable permissions, daemons and services. The Bastille tool lets you do this by asking a series of questions.

Clear text password transmission access is very important to harden a system. The r protocols, telnet and ftp should be eliminated because they all send passwords in clear text.

SEP

Re: how to implement trusted system ?

Muthukumar_5 — Mon, 20 Feb 2006 01:11:25 GMT

See the difference:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=638058

--
Muthu

Re: how to implement trusted system ?

Chauhan Amit — Mon, 20 Feb 2006 03:11:27 GMT

Check this link,

"Setting Up Your Trusted System"

http://docs.hp.com/en/B2355-90950/ch08s08.html

-Amit