topic Re: Building a Secure Server in Operating System - HP-UX

Building a Secure Server

Warren griggs — Mon, 05 Aug 2002 08:41:54 GMT

Hi,

I want to build a secure web server with a minimum os install and then configure minimum services. Does anybody know a good server build document for HPUX.

Thanks,

Colin.

Re: Building a Secure Server

Rainer von Bongartz — Mon, 05 Aug 2002 08:52:01 GMT

Check out this document:

http://people.hp.se/stevesk/bastion11.html

Regards
Rainer

Re: Building a Secure Server

Thierry Poels_1 — Mon, 05 Aug 2002 08:53:51 GMT

RTFF!! This question has already been asked many times before...

http://people.hp.se/stevesk/bastion11.html

good luck,
Thierry.

Re: Building a Secure Server

Warren griggs — Mon, 05 Aug 2002 09:08:52 GMT

Thanks for that, if anyone is interested this is Sun's equivelant.

http://www.enteract.com/~lspitz

This also has a lot of good security white papers and links.

Cheers,

Colin.

Re: Building a Secure Server

Anonymous — Tue, 06 Aug 2002 07:11:12 GMT

Colin,

you may actually use a "hardening script":
http://www.bastille-linux.org/download.html

HP-UX depot updated 24 July 2002, includes a Beta copy of Perl with Tk, about 21MB total (Note: you will need to upgrade this version of Perl when the official version is released)

more info and comments eg in
HP-UX Bastille - lockdown-hardening tool
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xc2d291ccb36bd611abdb0090277a778c,00.html

New Beta release of HP-UX Bastille
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xb43036e69499d611abdb0090277a778c,00.html

High level options for HP-UX Bastille
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x672536e69499d611abdb0090277a778c,00.html

Re: Building a Secure Server

Steven Sim Kok Leong — Tue, 06 Aug 2002 07:15:07 GMT

Hi,

Check out the CIS (Centre for Internet Security) security benchmark for HP-UX at:

http://www.cisecurity.org/bench_HPUX.html

It provides security guidelines (including permission settings) for HP-UX 11.00 in addition to HP-UX 10.20 and HP-UX 11.11. Pretty comprehensive.

In addition to hardening, you would want to use a vulnerability scanner to verify your security settings across the network.

Nessus is the ultimate opensource scanner if you want to audit your system across the network with the latest vulnerability checks.

http://www.nessus.org

Because of its opensource and the huge pool of volunteers writing vulnerability checks for it (the scripting language to write vulnerability check is pretty easy to use), vulnerability checks always come available extremely quickly once a vulnerability is known, unlke many other similar software.

Hope this helps. Regards.

Steven Sim Kok Leong