security related OS files

[kirk_11]

As part of our new security protocol, I need to assemble a list of all security related OS files for our HP-UX 10.20 machine. Anyone have any suggestions about which files/directories I should include?

[James R. Ferguson]

Hi:

I'm not quite sure for what you are looking. However, you might find this (now classic) whitepaper useful:

http://www.hp.com/products1/unix/operating/infolibrary/whitepapers/building_a_bastion_host.pdf

Regards!

...JRF...

[Pete Randall]

Kirk,

Download, install, and run the Bastille "security hardening/lockdown tool". It does a good job of pointing out such vulnerabilities. I believe you can run it in a preview mode to just get a list of recommended changes (at the least the earlier version I trialed could).


Pete

[Jon Mattatall]

A very open-ended question....

I'll add these links

http://www.giac.org/practical/gsec/Melanie_Corn_GSEC.pdf

http://www.kbeta.com/SecurityTips/Checklists/HPUX_11_Bastion_Guide.htm

There used to be one specific to 10.20, but it's gone....

Are you looking files involved in protecting you from intrusion? Users? DOS? It's all of a package.

Do a search at the top of the screen for "10.20 security", "bastion", or such, and there's PILES of suggestions. You're going to have to cull your list down to something managable, so try to narrow your focus.