HP-UX 11i Version 2 Installation and Update Guide, September 2004

Updating to HP-UX 11i v2
Updating to HP-UX 11i v2
Chapter 6120
IMPORTANT swinstall’s interactive user interface does not provide for selecting
mutually exclusive selectable software bundles. As a result, if you select
more than one HP-UX Bastille security configuration bundle from the
Security Choices section of the Select Additional Software screen (for
example, Sec20MngDMZ and Sec30DMZ), HP-UX Bastille applies the
highest security configuration selected.
For help using swinstall in interactive mode, refer to the swinstall (1M)
manpage or the Software Distributor Administration Guide.
Updating Selectable Software
To update to HP-UX 11i v2 and include additional selectable bundles
such as one of the HP-UX Bastille Security Configuration bundles, like
Sec30DMZ, follow these steps:
Step 1. If you want to install the HP-UX 11i v2 Foundation Operating
Environment bundles listed in Appendix D, “Software Distribution
Media,” on page 173, plus the Sec30DMZ security configuration bundle,
enter from the DVD media as root:
/usr/sbin/update-ux -s /dvdrom HPUX11-OE Sec30DMZ
If you only want to update your system with a selectable software
bundle, enter:
/usr/sbin/update-ux -s /dvdrom Sec30DMZ
IMPORTANT The HP-UX Bastille security model provides incrementally higher
security (metaphorically, like a ratchet). As a result, you can update from
a lower security level to a higher security level (example: Sec10Host to
Sec20MngDMZ).
If you intend to downgrade from a higher security level to a lower
security level, HP recommends that you run bastille -r before you
update your system to ensure that only the security settings you wanted
in the lower security level are applied. Otherwise, you may encounter
some security configurations that remain from the previous security
settings applied by HP-UX Bastille.