HP-UX 11i v3 Installation and Update Guide, March 2009 (Update 4 Release)

Table 3-3 Host-based Sec10Host Install-time Security Settings (continued)
ActionsCategory
Disable ptydaemon
Disable pwgrd
Disable rbootd
Disable CIFS Server
Disable CIFS Client
Disable NFS client daemons
Disable NFS server
Disable NIS client programs
Disable NIS server programs
Disable NIS+ server programs
Disable SNMPD
Daemons
Deactivate bootp
Deactivate inetd’s built-in services
Deactivate CDE helper services
Deactivate finger
Deactivate ident
Deactivate klogin and kshell
Deactivate ntalk
Deactivate login, shell, and exec services
Deactivate swat
Deactivate printer
Deactivate recserv
Deactivate tftp
Deactivate time
Deactivate uucp
Deactivate rquotad
Deactivates Event Monitoring Services (EMS) network communication
Enable logging for all inetd connections
inetd Services
Run sendmail via cron to process queue
Stop sendmail from running in daemon mode
Disable vrfy and expn commands
sendmail
Deactivate HP Apache 2.x Web Server
4
Set up cron job to run Software Assistant
2
Ensure the crontab files are only accessible by root
Restrict the use of cron to administrative accounts
Configure the HP-UX Secure Shell daemon to use generally-accepted
defaults
Other Settings
Security Considerations 43