HP-UX 11i Version 2 Installation and Update Guide, September 2004

Choosing an Installation Method
Security Considerations
Chapter 362
Security Choice Dependencies
The Sec00Tools security infrastructure bundle is default-installed on
your system. Although this bundle does not implement any security
changes at cold-install- or update-time, it does ensure that the required
software (Figure 3-1) is installed. By installing Sec00Tools, you can run
HP-UX Bastille at a later time to lock down your system.
Alternately, you can lock down your system using one of the following
selectable security configuration bundles at cold-install- or update-time:
• Sec10Host
• Sec20MngDMZ
• Sec30DMZ
These bundles are dependent on the Sec00Tools bundle.
Figure 3-1 Install-time Security Software Dependencies
Sec20MngDMZ
Sec10Host
Sec30DMZ
Sec00Tools
IPFilter
Security
Patch
Check
HP-UX
Bastille
HP-UX
Secure
Shell
perl
Selectable security bundles
Default-installed bundles
These selectable bundles lock
down your system at cold-install- or
update-time. They depend on
Sec00Tools to install the needed
software to secure your system.
This default-installed bundle does
not apply any security at cold-install-
or update-time.
This default-installed software is
required to secure your system
either at cold-install- or update-time
or at a later time.
OpenSSL