topic Re: C2 trusted systems in Operating System - HP-UX

C2 trusted systems

Danny Pogi — Mon, 12 May 2003 00:50:21 GMT

hi guys,

where can i find documents that explain trusted systems specifically C2 level?

thanks,

dan

malay boy — Mon, 12 May 2003 00:57:16 GMT

Michael Tully — Mon, 12 May 2003 01:08:45 GMT

Steven E. Protter — Mon, 12 May 2003 01:29:06 GMT

My standard security post.

Remember, though Windows NT was supposedly certified by the government C2 standard, that with IIS was quite a joke.

Security is more than a government label.

Here is how we keep up on these security issues.

Fist we subscribe to itrc security bulletins, which you apparently already do.

Next we use the following tools to harden security on our system and notify us of security patches.

Bastille Security hardening
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B6849AA

Perl which the above needs.
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=PERL

Security Patch Check
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B6834AA

TCP Wrappers

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=TCPWRAP

IDS/9000 (Intrusion Detection Sytstem)

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=J5083AA

Get all these products working you'll be quite secure.

Secure shell
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=T1471AA

I keep a close eye on permissoins, sticky bits suid and other issues with cron scripts.

Good Luck.

SEP

T G Manikandan — Mon, 12 May 2003 03:00:51 GMT