OS hardening

[gany59]

How to do the OS hardening of the hp-ux server, version is 11.23, and what are the steps need to carry for the OS hardening..

[Torsten. · Accepted solution]

Have a look at Bastille:

https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B6849AA

[Michal Kapalka (mikap)]

hi,

check this docu :

http://dataprotected.files.wordpress.com/2008/05/hp-ux-security-check.pdf

mikap

[Michal Kapalka (mikap)]

hi,

second link :

https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B6849AA

mikap

[gany59]

thanks folks,

what is know as OS hardening, how to set the parameters related to this ?

[Torsten.]

This is used to make the system more secure, you should read the notes about bastille or just try it on a test system.

[gany59]

so shall we use the bastille in the 11.11 and 10.20 versions.

[Torsten.]

10.20?

The best way to isolate a 10.20 system is to pull the LAN cable...

;-)

This is out of support for so many years now!

[Johnson Punniyalingam]

>>so shall we use the bastille in the 11.11 and 10.20 versions.<<

Yes, You can,

But support for HPUX 10.20 -> EOS - > End of support .

[Olivier Masse]

For 10.20 you can google for "kevin steves hp-ux bastion host". He wrote a hardening paper for 11.0 which was most probably used as the basis for the initial bastille release, and you can try to transpose whatever will be relevant to 10.20. Do this on a test system first.

Olivier