Equivalent of Hidden Linux v1.0 in HP-UX

[prakasse]

Hi Folks,

We need to hide a key/file (Redhat Linux, and AIX allows to be hidden in some portion of the OS) in HP-UX O/S where none of the users(inclduing root) can access or remove it. This is basically for license management.

In Linux there is Hidden Linux v1.0. I am wondering if a similar product is available on HP-UX which will fulfill our requirements? Quick reply is greatly appreciated.

Thanks in Advance,
Prakash

[Patrick Wallek]

I know of nothing similar that available for HP-UX.

[Steven E. Protter]

Shalom Prakash,

root can see everything.

No exceptions, no bypass. You either trust the person with root access or you buy windows and trust everyone.

You can change the permissions on a file to 000, but that won't stop root from accessing it.

SEP

[Wim Rombauts]

Yes, you can hide a file in HP-UX.

Look at "Security Containment Extensions". It allows you to create compartments in which you can specify what LAN access is allowed, what interprocess communication is allowed, and what file access is allowed.

You can prevent even root from reading any file, or just from writing to that file, or deleting it.

[prakasse]

Yes, you can hide a file in HP-UX.

Look at "Security Containment Extensions". It allows you to create compartments in which you can specify what LAN access is allowed, what interprocess communication is allowed, and what file access is allowed.

You can prevent even root from reading any file, or just from writing to that file, or deleting it.

>>>>>>>>>> Hi Wim, thanks for the reply. Can you point to any doc or link from HP that states this feature.

Thanks,
Senthil.

[Steven E. Protter]

Shalom,

http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=ContainmentExt

That is the software, docs come with.

Once again, even using this, root builds the security container, root can take it apart and access it.

There is a read the root user in the original Unix was originally known as G-d

Good Luck,

SEP

[Wim Rombauts]

The following links to the Administration Guide for HP-UX 11i v2 :

http://docs.hp.com/en/5991-8678/index.html

[Wim Rombauts]

>>>> Once again, even using this, root builds the security container, root can take it apart and access it.

No, if the root process runs within the container and the container denies access to /etc/cmpt (the container configuration directory), root will not be able to even see what is configured, so don't even think about modifying any rules.

If root runs a process outside the container, it can access all files as you are used to. (Since someone has to be able to set this up.)

I have seenthat from HP-UX 11i v3 on, this functionality is in the core-OS. For HP-UX 11i v2, it is a free addition.