HP-UX 11i Version 1.6 Release Notes

Other Functionality
HP Intrusion Detection System/9000 (IDS/9000)
Chapter 8
150
Files: Modification of critical system files and directories
Creation of world writable files
Creating setuid files
File additions and deletions
• Multiple response script capability: Users can have multiple response scripts
invoked when an alert is generated, in addition to simultaneous reports sent to the
administrative GUI.
Impact
No impact.
Compatibility
Version 2.1 is not compatible with HP-UX systems that are running version 1.0.
Version 2.1 is compatible with PA-RISC systems that are running version 2.0 or 2.1.
Performance
IDS/9000 runs in compatibility mode on IPF systems. Given the associated emulation
overhead, we anticipate significant performance degradation. Therefore, we recommend
that you do not run IDS/9000 agents on IPF production systems.
Obsolescence
The use of the SIGSEGV signal to terminate agent processes is deprecated, IPF systems
should use SIGTERM instead.
Documentation
The following documents are available in the Internet and Security Solutions collection
on the Instant Information CD and at http://docs.hp.com/hpux/internet:
HP Intrusion Detection System/9000 Release 2.1 Release Notes, Product Number J5083-90008.
HP Intrusion Detection System/9000 Administrator's Guide, Product Number J5083-90007.