HP-UX 11i Version 2 December 2007 Release Notes

HP-UX Bastille and Install Time Security
HP-UX Bastille A tool that configures a system to be more secure based on functionality/security
trade-offs
Install Time Security Install Time Security (ITS) leverages the product above to secure a system
at installation time. It does so by presenting four customer-selectable bundles to bring the system
to one of four levels:
• DMZ – Suitable for deployment in a DMZ
• Managed DMZ – allows select authenticated management protocols in through the
IPFilter-based firewall
• Host – Locks down without setting up a firewall like DMZ and Managed DMZ,
• SecTools – a “tools-only choice,” makes no configuration changes but loads all the tools and
infrastructure to pre-enable easy lockdown at OS runtime
Summary of Change
For the December 2007 release of HP-UX 11i v2, HP-UX Bastille version 3.0.xx includes the
following changes:
• HP-UX Software Assistant (SWA) integration has been added. (SWA integration was initially
delivered on the September 2007 Application Release [AR] media. It has now been carried
forward onto the December 2007 Operating Environments Update Release [OEUR] media.)
• Defect fixes have been incorporated.
• Security configuration reporting.
• Configuration drift detection from saved baseline.
Impact
HP-UX Software Assistant (SWA) creates much more robust and useful reports on the patch
status of the system. Bastille can now schedule SWA. In addition, defect fixes have been
incorporated.
Compatibility
There are no known compatibility issues.
Performance
There are no known performance issues.
Documentation
For further information, see the following:
• The HP-UX Bastille website at http://hp.com/go/bastille
• The HP-UX Bastille User's Guide (available with the product)
• The bastille(1M) and bastille_drift(1M) manpages
Obsolescence
In HP-UX 11i v3 initial release and in the June 2007 release of HP-UX 11i v2, HP-UX Bastille's
bundle, B6849AA, was replaced by HPUXBastille. It contains the same products.
HP-UX Bastille version 3.0 does not support HP-UX 11.00. For customers using HP-UX 11.00,
Bastille version 2.1 is available on the web at http://hp.com/go/bastille.
150 Security