Security

[Robert A Kirkpatrick]

Hi, I am looking to improve my system security. I have installed COPS and started tighting up files. Is there any other system software that I can use to assist me

[Stefan Farrelly]

Install;

B6834AA B.01.00 HP-UX Security Patch Check Tool

You can download from www.software.hp.com. Run it via cron regularly, it will check to HP and inform you of any new security patches, and if your serevr is uptodate. Very handy.

[Pete Randall]

Hi,

Take a look at HP's free Bastille tool:

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B6849AA


"HP-UX Bastille is a security hardening/lockdown tool which can be used to enhance the security of the HP-UX operating system. It provides customized lockdown on a system by system basis by encoding functionality similar to the Bastion Host whitepaper and other hardening/lockdown checklists."


Pete

[Zeev Schultz]

Except for Bastille which is good
there is a 'bastion hp-ux document' -
url : http://people.hp.se/stevesk/bastion11.html

Here's a list of HP-UX security tools available:
http://www.hp.com/products1/unix/operating/security/ - all the kerberos,ssh,ipsec etc tools.

Zeev

[Cheryl Griffin]

For a complete listing of security offerings see:
http://www.software.hp.com/ISS_products_list.html

[Steven E. Protter]

Forgive the duplication.

Here is a cut and paste of my scurity sermon.

CIFS/9000

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B8725AA

Client
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B8724AA

Documentation:
http://www.docs.hp.com/hpux/onlinedocs/B8725-90003/B8725-90003.html

Security Post



Links:


security_patch_check: Checks your system and makes sure its up to date with security patches from HP
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B6834AA


Required Perl install

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=PERL

Bastille: Security Hardening Tool

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B6849AA

TCP Wrappers

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=TCPWRAP

Secure Shell: a replacement for rcp ftp and telnet that encrypts passwords

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=T1471AA

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=T1471AA

IDS/9000 Intrusion Detection System which can track security breaches and attempted security breaches.

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=J5083AA

pam kerobos
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=J5849AA


Attached is a paper on security hardening.

SEP

[Elif Gius]

You can use tripwire, ipsec, mkpdf for securing your system and watching system changes.

[Elif Gius]

Hi,

sorry I forgot tcpwrapper...which is a very good tool to restrict access to system daemons.

[V. V. Ravi Kumar_1]

hi,

see the website
www.cisecurity.org
where u can find out benchmark utilities for HP-UX security checking. We are using it and is a very good tool.

Regards