C2 trusted systems

[Danny Pogi]

hi guys,

where can i find documents that explain trusted systems specifically C2 level?

thanks,

dan

[malay boy]

Hi Danny,
I alway's went to docs.hp.com and search for C2.The reply for 293 result.
Here are some of them :

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90121/B2355-90121_top.html&con=/hpux/onlinedocs/B2355-90121/00/00/7-con.html&toc=/hpux/onlinedocs/B2355-90121/00/00/7-toc.html&searchterms=C2&queryid=20030511-195245

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90121/B2355-90121_top.html&con=/hpux/onlinedocs/B2355-90121/00/00/17-con.html&toc=/hpux/onlinedocs/B2355-90121/00/00/17-toc.html&searchterms=C2&queryid=20030511-195245

hope this help
mB

[Michael Tully · Accepted solution]

These days setting up a system as trusted is equivalent to C2. This in conjunction with setting up your system as a bastion server will also assist in locking it down. See this document.
http://www.hp.com/products1/unix/operating/infolibrary/whitepapers/building_a_bastion_host.pdf
For general information about HPUX security check these documents.
http://www.docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90742/B2355-90742_top.html&con=/hpux/onlinedocs/B2355-90742/00/00/60-con.html&toc=/hpux/onlinedocs/B2355-90742/00/00/60-toc.html&searchterms=security&queryid=20030511-195741
http://www.docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90742/B2355-90742_top.html&con=/hpux/onlinedocs/B2355-90742/00/00/58-con.html&toc=/hpux/onlinedocs/B2355-90742/00/00/58-toc.html&searchterms=security&queryid=20030511-195741
http://www.hp.com/products1/unix/operating/hpux11i/infolibrary/security/index.html

The different classes of security use to be: (courtesy of Michael Steele)

D1 > C1 > C2 > B1 > B2 > B3 > A1

D1 - Minimal
C1 - Discretionary
C2 - Conrolled Access
B1 - Labeled Security
B2 - Structed Protection
B3 - Security domains
A1 - Verified Design

Regards
Michael
"When I have trouble spelling, it's called fat finger syndrome"

[Steven E. Protter]

My standard security post.

Remember, though Windows NT was supposedly certified by the government C2 standard, that with IIS was quite a joke.

Security is more than a government label.


Here is how we keep up on these security issues.

Fist we subscribe to itrc security bulletins, which you apparently already do.

Next we use the following tools to harden security on our system and notify us of security patches.

Bastille Security hardening
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B6849AA

Perl which the above needs.
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=PERL

Security Patch Check
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B6834AA

TCP Wrappers

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=TCPWRAP

IDS/9000 (Intrusion Detection Sytstem)

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=J5083AA

Get all these products working you'll be quite secure.

Secure shell
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=T1471AA


I keep a close eye on permissoins, sticky bits suid and other issues with cron scripts.

Good Luck.

SEP

[T G Manikandan]

http://www1.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000065774364