Security of EMS Hardware monitoring

[Mihails Nikitins]

By default, EMS Hardware monitoring bundle launches a dozen of daemons listening on different ports on all interfaces. I suppose the processes should listen only on loopback interfaces. Thanks and points in advance for sharing your security hints!

BR,
Mihails

[Steven E. Protter]

Having trouble discerning your issue.

EMS is a root process, run by root. Pretty much has to be to do this kind of diagnostic on the hardware

I have seen no security issues with this product. As long as the root password is secure, the data and processes should be secure.

I do not consider EMS a security hazard at all.

Hope that helps. Happy to answer other more specific security queries.

SEP

[Mihails Nikitins]

Thanks for your opinion Steve,

Anyway, I believe no process should listen on network interfaces if it does not communicate with other hosts. Is it possible to bind the processes to loopback interface?

BR,
Mihails

[Ivajlo Yanakiev]

Hi Mihails

Of you need securety ?
You must better look for IPFILTER and HP-UX Bastille
Read more aboute EMS here :
http://docs.hp.com/cgi-bin/otsearch/getfile?id=/hpux/11iv2/index.html&searchterms=Bastille%7cHP-UX&queryid=20041122-060922

Generaly HPUX is not secure platform.
HPUX is hight perf system.
Use FW if you need more securety