HP-UX security management

[Fenglin]

Hi

Would like to know how to check the following
1)
partitions recommended value
/home nosuid
/var nosuid
/tmp defaults
2)
telnet is disabled?
3)
Password based authentication is disabled in SSH? Yes/No
Certificate based authentication is enabled in SSH? Yes/No
Only SSH protocol 2 is allowed by the ssh server? Yes/No
Privilege separation is ensured by the SSH server? Yes/No
SSH X11 Forwarding is disabled ? Yes/No
SSH ignores rhost files? Yes/No
Root logon via SSH is not allowed? Yes/No
Empty passwords are not permited in loggin on via SSH? Yes/No
Rhosts authentication is not allowed to be used via SSH? Yes/No
Host based authentication is not allowed to be used by SSH? Yes/No

Regards
Feng Lin

[Patrick Wallek]

1) Check /etc/fstab

2) Check /etc/inetd.conf

3) Check ssh.conf and sshd.conf

[Emil Velez]

Run Bastille

It automatically will allow you to unconfigure and reconfigure security aspects of the system.