Bastille on HPUX 11i

[MikeL_4]

Now I am really confused, I've installed Bastille as our network group requested so that we can "Harden" our server.

Now that I have Bastille installed where do I go from here, do I run something that tells me what needs to be done to secure the server ??

[Prashant Zanwar_4 · Accepted solution]

Here is a good document which you would like to refer to.

Check for the latest version of this.

Hope it helps

Thanks
Prashant

[Pete Randall]

Mike,

Now you need to run it to see what recommendations it comes up with for your system. There should be an executable in /opt/sec_mgmt/bastille/bin or whatever the install path was.


Pete

[Marco Santerre]

Yes you will need to run it at least once so that you can follow some of the security features it recommends. Moreover, you can also run Bastille as a scheduled job to verify your server every month. Other packages are also part of Bastille like Security_patch_check.

[Steven E. Protter]

Bastille is a survey based product that runs in X Windows.

You need to install it using swinstall and then connect to your machine using X Windows emulation software.

Bastille asks a series of questions:
Do you want to do this? Do you want to do that?

It provides explanations and follow up instructions if needed to implement the steps.

Once side benefit is that it can change a system to stop running certain insecure, obsolete daemons. This typically improves system performance.

SEP

[Cheryl Griffin]

Be sure to check this out too
http://www.software.hp.com/portal/swdepot/displayInstallInfo.do?productNumber=B6849AA

[MikeL_4]

My understanding is running through the process makes recommendations and at the end you can accept to implement them or not ??

If the recommendations are implemented is there a way for Bastille to back these out in case of problems ??

[Cheryl Griffin]

Yes, Bastille tracks everything it does and will revert all settings back if you decide to.
See
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=30913

[MikeL_4]

Thanks all for your quick responses and information....