CIS Scoring Tool on HP-UX 11.23

[EdTMC]

Hi All,

When running the CIS scan tool, keep getting these errors in HP-UX 11.23:

ERROR: Couldn't open /opt/CIS/cis_ruler_suid_programs_hp-ux_11.23 -- list of standard SUID programs for HP-UX B.11.23 .
NOTE: If you can generate a standard list of SUID/SGID root programs for this version, please e-mail to jay@bastille-linux.org.
ERROR: Couldn't open /opt/CIS/cis_ruler_sgid_programs_hp-ux_11.23 -- list of standard SGID programs for HP-UX B.11.23 .
NOTE: If you can generate a standard list of SUID/SGID root programs for this version, please e-mail to jay@bastille-linux.org.
ERROR: Couldn't open /opt/CIS/cis_ruler_world_writable_files_hp-ux_11.23 -- list of standard world-writable files for HP-UX B.11.23 .
NOTE: If you can generate a standard list of world-writable files for this version, please e-mail to jay@bastille-linux.org.

I can't seem to find the required files anywhere or even in CIS website. Can someone point me to the right direction or is the tool a bit dated for 11.23?

Thx in advance for any advise.

[Steven E. Protter]

Shalom,

Maybe you should email jay at bastille-linux, whose email you just posted in a domain where spammers collect addresses.

Maybe you should get bastille from HP's port of the code.

http://software.hp.com

You need two things.

bastille
PERL5

Download and swinstall both.

SEP

[Robert Fritz]

Hi there,

CIS ( http://cisecurity.org ), like any volunteer-based organization of broad interest and scope, sometimes has some difficulty in keeping their stuff up-to-date. You could write Jay, but he doesn't actually have an 11.23 or 11.31 box to use...

Tell you what, I can check around, and see if I can find someone to scan a couple MCOE systems and send the results to Jay/CIS, and they'll queue it for inclusion.

I'll admit that I can't talk to what their time-frame would be to get that included in the scoring tool.

Also, note to all, though Jay is involved in both CIS and Bastille, they aren't the same thing. HP-UX Bastille contains HP value-add, and is supported by HP. (note I didn't refer to that as a mere "port" ;-) ) The CIS scoring tool, on the other hand, is built and supported solely by the CIS community.

Hope that helps,
-Robert

[EdTMC]

Thx for the help and useful information :)