HP-UX Security Containment Extensions B.11.31.02 Release Notes

Documentation
NOTE: This document was updated to include the description and workaround for a known
problem. See “Known Problems in HP-UX Security Containment Extensions B.11.31.02” (page 7)
for more information.
Use the following documents in conjunction with each other when using HP-UX Security
Containment Extensions B.11.31.02:
• HP-UX Compartment Login using Secure Shell (SSH)
• HP-UX System Administrator's Guide: Security Management
These documents are located at www.hp.com/go/hpux-security-docs, click HP-UX 11i Security
Containment Software.
You can find online documentation for the Containment Wizard using the perldoc command
as follows:
# perldoc /usr/sbin/contain
Table 1-1 lists and briefly describes the HP-UX Security Containment Extensions manpages,
which are installed with the product at /usr/share/man/<man_section#>.Z:
Table 1-1 HP-UX Security Containment Extensions manpages
DescriptionManpage
A kernel tunable that defines the default rule for inter-compartment
local-to-local communications.
cmpt_allow_local(5)
Describes the compartment login feature.compartment_login(5)
Describes the HP-UX compartments files.compartments(4)
Extended authentication, account, password, and session service module
for HP-UX.
pam_hpsec(5)
Compatibility Information and Installation Requirements
HP-UX Security Containment Extensions B.11.31.02 has the following hardware requirements:
• HP 9000 computers
• HP Integrity servers
• 2.8MB of disk space
HP-UX Security Containment Extensions B.11.31.02 has the following software requirements:
• HP-UX 11i version 3
• HP-UX Role-Based Access Control (RBAC) B.11.31.05
• No additional patches are required to install HP-UX Security Containment Extensions.
The HP-UX Security Containment Extensions bundle contains all patches needed to run
HP-UX Security Containment Extensions, as follows:
— The HP-UX libpam_hpsec cumulative patch: PHCO_38601
— The HP-UX rbac cumulative patch: PHCO_38583
— The HP-UX userdb cumulative patch: PHCO_36480
— The HP-UX passwd cumulative patch: PHCO_36481
— The HP-UX libpam_unix cumulative patch: PHCO_36760
— The HP-UX compartments cumulative patch: PHCO_40507
— The HP-UX sec_file_rules cumulative patch: PHKL_40506
— The HP-UX sec_net_rules cumulative patch: PHKL_40105
6 HP-UX Security Containment Extensions B.11.31.02