HP-UX 11i v3 Installation and Update Guide, September 2008 (Update 3 Release)

# inetd -c
• Use HP-UX Bastille to update the configuration: Revert to the previous HP-UX
Bastille configuration; then apply the new HP-UX Bastille configuration.
# bastille -r
# bastille -b
Configuring HP-UX Bastille Sec10Host
To configure the HP-UX Bastille Sec10 Host, refer to the Securing Serviceguard document
at
http://docs.hp.com/
CAUTION: When reverting to the configuration prior to the use of HP-UX Bastille,
note these precautions:
• Security configuration changes will be undone temporarily.
• Other manual configuration changes or additional software installed since HP-UX
Bastille was initially run may result in HP-UX Bastille requiring a manual merge
of configuration settings.
• Refer to the Bastille question text in the HP-UX System Administrator’s Guide or in
the Bastille GUI for detail on the precise interactions.
Security Choice Dependencies
The Sec00Tools security level is installed by default on your system. Although
Sec00Tools does not implement any security changes at cold-install- or update-time,
it does ensure that the required software (Figure 3-1) is installed. The Sec00Tools
security level contains the pre-built configuration files that you can use to create a
security level or you can use it as a template to create a custom security configuration.
The Sec00Tools security level also ensures that the software needed by those security
levels is present.
Alternately, you can lock down your system using one of the following selectable
security levels at cold-install- or update-time:
• Sec10Host
• Sec20MngDMZ
• Sec30DMZ
Sec10Host, Sec20MngDMZ, and Sec30DMZ are dependent on Sec00Tools.
40 Choosing an Installation Method