HP-UX 11i Version 2 Installation and Update Guide, May 2005

Choosing an Installation Method
Security Considerations
Chapter 3 61
CAUTION When reverting to the previous HP-UX Bastille configuration, note these
precautions:
• Security configuration changes will be undone temporarily.
• Other manual configuration changes or additional software installed
since HP-UX Bastille was initially run may result in HP-UX Bastille
requiring a manual merge of configuration settings.
Security Choice Dependencies
The Sec00Tools security infrastructure bundle is default-installed on
your system. Although this bundle does not implement any security
changes at cold-install- or update-time, it does ensure that the required
software (Figure 3-1) is installed. The Sec00Tools security bundle
contains the pre-built configuration files that you can use to create a
security level or you can use it as a template to create a custom security
configuration. The Sec00Tools security bundle also ensures that the
software needed by those security levels is present.
Alternately, you can lock down your system using one of the following
selectable security configuration bundles at cold-install- or update-time:
• Sec10Host
• Sec20MngDMZ
• Sec30DMZ