need to harden os . Help !!

[Vincent_5]

Hi Guys,

I need to harden my os with CIS security requirement, can someone advice how can I harden the below parameter

How to disable \nobody user in secure rpc

How to disable xaccess , remote xlogin

How to restrict diagnostic daemon to  1

How to restrict syslog to local only

How to disable sendmail daemon mode , how can sendmail process queue via cron

How to restrict remote access to swlist

How to block netrange , secureshell, wbem, hpidsagent, hpidsadmin, webadmin, webadminautostart, ping , cfservd, dnsquery and dnszonetransfer

Kindly help . Thanks in advance

Regards

Vincent

[Torsten.]

Talking about HP-UX?

Have a look at this:

https://h20392.www2.hpe.com/portal/swdepot/displayProductInfo.do?productNumber=B6849AA

HP-UX Bastille

[Vincent_5]

Hi Torsen,

      I  have slready run bastille, but it does not block the below service?? Kindly advice

How to block netrange , secureshell, wbem, hpidsagent, hpidsadmin, webadmin, webadminautostart, ping , cfservd, dnsquery and dnszonetransfer . Thanks

Regards

Viincent