topic Re: Bastille and Security_patch_check in Operating System - HP-UX

Bastille and Security_patch_check

Romain Sutton — Fri, 06 Dec 2002 19:08:28 GMT

i wonder if anyone can help me

i have installed bastille and the security_patch_check that it recomends. On re-running bastile the TODO file still tels me that the security_patch_check software isn't installed..but swlist shows that it is.

Any thoughts

Re: Bastille and Security_patch_check

Jeff Schussele — Fri, 06 Dec 2002 19:14:15 GMT

Hi Romain,

Does
swlist -l fileset -a state security_patch_check
show the product's fileset all configured?
If some say installed but NOT configured, then you'll need to either re-install or run swconfig.

Rgds,
Jeff

Re: Bastille and Security_patch_check

Keith Buck — Fri, 06 Dec 2002 22:12:32 GMT

The TODO list does not get cleared out between runs. This is because for most of the actions in the TODO list, Bastille doesn't yet know how to tell if you've done them (or they wouldn't be TODO items). You'll find that other items also remain in the TODO list if you re-run Bastille, which in most cases is correct behavior. You may choose to delete items out of the TODO list as you complete them so you won't see them again.

I'll log this as an enhancement request. Thanks!

-Keith

Re: Bastille and Security_patch_check

Steven E. Protter — Tue, 10 Dec 2002 19:13:09 GMT

Go get security_patch_check and re-install it.

I had used it for years prior to running Bastille.

and Yeah, the todo list should not be cleared, it should be copied with a time and datestamp for reference purposes.

Enhancement request.

I think Bastille works better with HP-UX than Linux, and I've done both.