Steps for the OS hardening

[gany59]

how can we do the OS hardening, what are the things need to be note for that ?

i got some point from going through the itrc like restrict the root login to the console, stop the IP forwarding, so apart from this can any body tell some more things extra ....

Thanks in advance

[Dennis Handly]

Have you looked at Bastille?
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1207334
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1380409
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1385619

[Fred K. Abell Jr._1]

Bastille is a good start. It will take care of most of the low hanging fruit. CIS benchmarks are also good http://cisecurity.org/en-us/?route=default. For more advanced help, go to the SANS.org reading room http://www.sans.org/reading_room/ and search 'securing hp-ux'. A lot of what you have to do depends on how you are going to use the box. A workstation in a lab is going to be done differently than a web server.

Fred