topic Compilers & interpreters in Operating System - HP-UX

Compilers & interpreters

S.S. — Tue, 22 Dec 2009 07:04:11 GMT

Hi All,

Please help me, how can we find all the compilers & interpreters in HP-UX B.11.11 U 9000/800/rp7440.

The following is the correct way to find the compilers.

swlist -l product|grep -i compilers

Is it a clever thing, to remove the compilers which are not necessary ?

Please suggest me.

Thanks....

Re: Compilers & interpreters

Jeeshan — Tue, 22 Dec 2009 07:21:52 GMT

Check out this command

#swlist -l product|grep -i compiler

>>Is it a clever thing, to remove the compilers which are not necessary ?

No, This is not a clever thing. Because Some Applications like Database, Software need the compiler to run. Without this, some of your application written in C or C++ language cannot interpret and cause terminate the program.

Re: Compilers & interpreters

Dennis Handly — Tue, 22 Dec 2009 07:34:59 GMT

HP's compilers are in /opt/.
The bundled C compile is in /usr/ccs/bin/.
gcc/g++ is usually in /usr/local/bin/.
There are java interpreters in /opt/java*/.

>Is it a clever thing, to remove the compilers which are not necessary?

Clever how? Saving disk space? Security police?
Not really, especially if you paid for them.

You will need the bundled C compiler to install Oracle.

Re: Compilers & interpreters

S.S. — Tue, 22 Dec 2009 08:07:06 GMT

It is a security policy to remove unnecessary compilers.

I found the following compilers.

GNU_C_C++ 3.4.4 GNU C & C++ compilers
Perl5-32 D.5.8.8.B 32-bit 5.8.8 Perl Programming Language with Extensions
Perl5-64 D.5.8.8.B 64-bit 5.8.8 Perl Programming Language with Extensions
PHSS_33944 1.0 HP aC++ -AA runtime libraries (aCC A.03.71)

I checked for java compilers but there are no java compilers.

Before removing should have to check with application team right ?

Thanks

Swetha

Re: Compilers & interpreters

Jeeshan — Tue, 22 Dec 2009 08:26:03 GMT

Definitely you should consult with your application team whether which software is necessary and which not.

Re: Compilers & interpreters

Steven Schweda — Tue, 22 Dec 2009 08:30:23 GMT

> Is it a clever thing, to remove the
> compilers which are not necessary ?

Yes. How do you know which ones are not
necessary?

> It is a security policy to remove
> unnecessary compilers.

So, it really doesn't matter whether removing
them is a good idea or not? What, exactly,
makes a compiler a security problem? I can
see why, say, "ls" might pose a risk, so I'd
be sure to remove that, but why a C compiler?

> swlist -l product [...]

> I found the following compilers.

"swlist" will find only products installed in
a particular way. Building a GCC kit from
the sources is not that way, but it will give
you one or more compilers. I thought that
any user could install GCC anywhere he might
wish to (and had write permission). You may
need to broaden your search.

> PHSS_33944 1.0 HP aC++ -AA runtime libraries (aCC A.03.71)

A run-time library is not a compiler.

> Before removing should have to check with
> application team right ?

Or anyone else who might wish to use them.
Some system managers might find Perl to be
useful.

Your security experts seem to have too much
time on their hands, and not enough real
problems to attack.

Re: Compilers & interpreters

Dennis Handly — Tue, 22 Dec 2009 08:37:35 GMT

>I found the following compilers.
GNU_C_C++ 3.4.4 GNU C & C++ compilers

If you aren't doing any development, you can remove the GNU compilers.

>Perl5-32 D.5.8.8.B 32-bit 5.8.8 Perl
>Perl5-64 D.5.8.8.B 64-bit 5.8.8 Perl

You can't remove interpreters since you won't be able to run any perl applications/scripts. And system apps/utilities may need that Perl.

>PHSS_33944 HP aC++ -AA runtime libraries (aCC A.03.71)

You just absolutely positively can't remove the aC++ runtime. This is used by HP-UX.
Instead you should update to the recommended patch: PHSS_33945