Install-Time Security

[Neil Herring_1]

Quick question. Can I use the software that is clearly available for 11i V2 within version 1? Been having a hunt around the website and nothing alludes to this. I am assuming not and will therefore have to install Bastille, Security Patch Check and HIDS individually if I want to use them. Thanks for your help.

[Pete Randall]

Neil,

I would have to say it's unlikely that this would work. Software is generally upward compatible so 11iV1 binaries will run on 11iV2, but not the other way around.


Pete

[Neil Herring_1]

Thx. Just confirms my suspicions I guess.

[Keith Buck · Accepted solution]

Neil,

The OS versions that a given piece of software will work on is determined by the os_release field of the particular fileset. For now at least, Bastille and Security Patch Check both specify B.11.*, and there is a single package that works for all 11.x systems. Note that this is the exception, not the rule. Many software products are packaged individually per OS version.

Install-time security packages are OS specific and not available for 11i v1 (you can do most of the same things with Bastille; ITS is the turnkey solution available for 11i v2). I don't know the details for HIDS, but I'm pretty sure it is available at software.hp.com for 11i v1.

Hope that helps.

-Keith

[Greg Vaidman]

All the products you mention are available for 11i v1 from http://www.software.hp.com/ISS_products_list.html

If you want to use them, just download and install.

If you're asking whether you can copy the binaries from an 11i v2 system to an 11i v1 system, that's a bad idea even if the systems were the same. You could potentially miss files in an unusual path, or miss changes made by SD control scripts (e.g., postinstall, configure, etc.).