HP-UX 11i Version 2 December 2005 Release Notes

What is New at a Glance
What is New in the Initial (October 2003) HP-UX 11i v2 Release?
Chapter 3
71
• Web Browsing:
— Mozilla Application Suite 1.2.1: Added as default browser for HP-UX 11i v2.
— Netscape 7: Replaces Netscape Communicator 4.79.
Initial Release Notes, Chapter 7: “Security”
• Boot Authentication: Now available on all Standard Systems. Standard Mode Boot
Authentication feature can be configured by two parameters.
• Generic Security Service Application Programming Interface (GSS-API): Now
delivered as part of HP-UX 11i v2. IPv6 enabled.
• HP-UX Auditing System: Several system call options and event type options are
accepted, but will be obsoleted in the next release.
• HP-UX Bastille 2.1: Now included in HP-UX 11i v2. New version adds finer
granularity of configuration, improved question flow, better input validation, and
new lockdown features.
• HP-UX Host Intrusion Detection System (HIDS) 2.2: Maintenance release with
defect fixes and a few enhancements. No new functionality in this version.
• HP-UX IPFilter A.03.05.06: Supports HP-UX 11i v2 on Itanium-based platforms.
Automatically installed with all OEs. Using IPFilter and ServiceGuard requires
specific IPFilter rules to ensure proper operation of ServiceGuard clusters.
• HP-UX Secure Shell A.03.10: New product. Based on OpenSSH 3.1p1, provides a
secure channel for remote communication by transparently encrypting network
traffic. Uses hashing to ensure data integrity and supports several authentication
methods.
• Install-Time Security 1.x.x: Adds a security step to the install/update process that
allows you to configure the Bastille security lockdown engine during system
installation.
• Kerberos Client (KRB5-Client): Now delivered as part of HP-US 11i v2. Changes
include support for appdefaults section in the /etc/krb5.conf; multidomain
support; IPv6 support.
• PAM Kerberos: Supports both Itanium-based and PA-RISC applications in 32-bit
mode. Now prevents a user from changing another user’s password.
• Security Patch Check 1.3: Now included in HP-UX 11i v2 OEs. Simplifies the process
of determining whether you have all the relevant security patches on your system.
This version does better corner-case handling; incorporates a number of defect fixes
and clearer wording.
• Shadow Passwords: New feature enhances system security by hiding user-encrypted
passwords in a shadow password file.
• Strong Random Number Generator: New feature provides a secure, non-reproducible
source of binary sequences for applications that generate encryption keys and other
cryptographic quantities.
Initial Release Notes, Chapter 8: “Commands and System Calls”
•The envd Environment Daemon: Now supported.