Table of Contents
Advertisement
If the PATH environment variable has not been updated, use:
# /opt/sec_mgmt/bastille/bin/bastille
Figure 3-1
Figure 3-1 HP-UX Bastille user interface
4.
Answer the questions that appear on screen. The questions are categorized by function.
Check marks are used as completion indicators to track your progress through the program.
Only questions that apply to your operating system and relate to installed tools appear.
Each question explains a security issue and describes the resulting action needed to lock
down the HP-UX system. Each question also describes the high-level cost and benefit of
each decision.
Use the Explain More/Explain Less button for more or less verbose explanations. Not all
questions have both long and short answers. For a complete list of questions with detailed
information about each item, see
Table 3-1 Question modules
Question module
Patches
FilePermissions
AcountSecurity
Secureinetd
MiscellaneousDaemons
Sendmail
DNS
Apache
FTP
12
Using HP-UX Bastille
shows the main screen of the HP-UX Bastille user interface.
Description
Installs and configures applications for security bulletin compliance checking
Performs SUID and other permission tuning
Configures login settings and access to cron
Disables unrequired inetd services
Turns off services that are often unrequired or a security risk
Disables or configures mail security
Disables or configures DNS security
Configures Apache web server security
Configures FTP security
Appendix C (page
33).
Advertisement
Table of Contents
