SARA in HPUX11.11

[YLTan]

Have anyone try SARA 4.1.4c in HPUX11.11 ??
I am trying to use it to check my server for any security loophole. I got this error after following the instruction given.

Can't locate IO/Socket.pm in @INC (@INC contains: /opt/perl5/lib/5.00502/PA-RISC1.1 /opt/perl5/lib/5.00502 /opt/perl5/lib/site_perl/5.005/PA-RISC1.1 /opt/perl5/lib/site_perl/5.005 .) at perl/misc.pl line 232.
BEGIN failed--compilation aborted at perl/misc.pl line 232.

Running .configure and follow by make produces the last few lines like this;
.....
Now building FIFOs for SSS
ps: unknown user x
SSS directory FIFOs will not be built, no Web Server found


What does this means??

[Michael Tully · Accepted solution]

why bother with packages like SARA when you can use HP's own tools.

bastille
IDS
LDAP
security patch check

Have a look here:
http://www.software.hp.com/ISS_products_list.html

[Donny Jekels]

dear fellow sara monger.

Micheal, is a cry baby. Bob should hear what he has to say about Sara.

I installed sara on a 11.i box. runs beautifull. sara does tons more than hp's own tools.

anyaway I don't want to jump on that band wagon. your questions is of more concern. make sure all the perl modules required are installed before you attempt to install sara.



live free or die
donny

[Steven Sim Kok Leong]

Hi,

Personally, I prefer nessus to sara. In any case, sara is a network-based scanner right? So it doesn't necessarily need to be installed on HP-UX to run a vulnerability assessment against it.

You can install it on a linux box and run it against your HP servers.

Hope this helps. Regards.

Steven Sim Kok Leong