HPUX 11.31 OS Hardening

[Trng]

Dear Team,

i got around 50 HPUX 11.31 Servers in support.can anyone share a good OS Hardening/Security hardening document for HPUX 11.31 ?..This is required for having better score on upcoming external audit

rgds
trng

[Steven E. Protter]

Shalom,

A good start:

http://software.hp.com
Search for bastille.
Download it.
Search for perl5, which is a requirement of bastille, in spite of the fact that perl is present in a number of places on your system.

Download it.

swinstall the perl depot
swinstall the bastille depot.

In X windows mode, bastille.

Let it walk you through the questions. There will be a todo list left for more difficult tasks that can further improve your audit score.

SEP

[Emil Velez]

1. Install bastille on all of the systems

2. run bastille on 1 system
3. bastille -b config
4. copy config file to all other nodes
5. run bastille -b config on all other nodes.

THe config file can be used on all other nodes that run the same OS.

if you answer yes to all the questions your system will be so locked down you cannot log on. Read the documentation to see what each question does. Bastille can be undone with bastille -r