topic Re: Bastion Document in Operating System - HP-UX

Bastion Document

miracle — Fri, 22 Oct 2004 17:39:10 GMT

Could someone point me to the latest bastion document. I can't seem find anything but a very one.
Thanks

Re: Bastion Document

Geoff Wild — Fri, 22 Oct 2004 18:08:01 GMT

In "Managing Systems and Workgroups", under Table Of Contents "Administering a System: Managing System Security " s a section called "HP-UX Bastille "

Also in this doc:

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/5990-8172/5990-8172_top.html&con=/hpux/onlinedocs/5990-8172/00/01/112-con.html&toc=/hpux/onlinedocs/5990-8172/00/01/112-toc.html&searchterms=bastille&queryid=20041022-170431

And here:

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B6849AA

Rgds...Geoff

Re: Bastion Document

miracle — Fri, 22 Oct 2004 22:07:48 GMT

That document only points to 'bastille' not bastion. I remember seeing an updated document on a HP web page that was more up to date than the original Kevin Steves document. Unfortunately that link is no longer.

Re: Bastion Document

Sridhar Bhaskarla — Fri, 22 Oct 2004 22:45:07 GMT

Hi,

Try this site. This is for 11.0 system.

http://www.securitydocs.com/Operating_System/HP-UX

-Sri

Re: Bastion Document

Geoff Wild — Fri, 22 Oct 2004 22:55:56 GMT

As far as I know bastile = bastion...

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=110518

http://secinf.net/unix_security/Building_a_Bastion_Host_Using_HPUX_11.html

http://downloads.securityfocus.com/library/bastion11.html

Rgds...Geoff

Re: Bastion Document

Tom Ward_1 — Sat, 23 Oct 2004 09:16:31 GMT

Hello,

The only one I can find on ITRC is last updated 29 Aug 2002. It's document ID USECKBAN00000800.

You'll find it under Maintenance and Support for HP products, search technical knowledge base, change the drop down from keyword to Doc ID and put the above ID in the search field.

I beleive that's a current as it gets.

Regards,
Tom

Re: Bastion Document

Robert Fritz — Mon, 25 Oct 2004 11:20:17 GMT

While it's certainly true that Bastille incorporated the supportable elements of the Bastion host whitepaper, it left out some of more problematic elements that made the system hard to use and support, and hard in some cases to even predict behavior. Bastille then "instead" does some more global configuration whose results are more predictable, like setting up an IPfilter "block all" firewall, with exceptions specified by the user.

The result is that a system that has been configured with Bastille is still supported.

The Bastion host whitepaper was updated to 11.00 at some point, but I'd talked to the author, and he's not keeping it up to date, nor hosting a site anymore. I believe there are copies one can find on Google, but using the Bastion host whitepaper won't result in a supported system, so tread carefully.