HP-UX 11i v3 Installation and Update Guide, September 2007 (Update 1 Release)

Security Choice Dependencies
The Sec00Tools security level is installed by default on your system. Although
Sec00Tools does not implement any security changes at cold-install- or update-time,
it does ensure that the required software (Figure 3-1) is installed. The Sec00Tools
security level contains the pre-built configuration files that you can use to create a
security level or you can use it as a template to create a custom security configuration.
The Sec00Tools security level also ensures that the software needed by those security
levels is present.
Alternately, you can lock down your system using one of the following selectable
security levels at cold-install- or update-time:
• Sec10Host
• Sec20MngDMZ
• Sec30DMZ
Sec10Host, Sec20MngDMZ, and Sec30DMZ are dependent on Sec00Tools.
Figure 3-1 Install-time Security Software Dependencies
Sec20MngDMZ
Sec10Host
Sec30DMZ
Sec00Tools
IPFilter
Software
Assistant
(SWA)
HP-UX
Bastille
HP-UX
Secure
Shell
perl
Selectable security levels
Default-installed security levels
These selectable security levels
lock down your system at
cold-install- or update-time. They
depend on Sec00Tools to install the
needed software to secure your
system.
This default-installed security level
does not apply any security at
cold-install- or update-time.
The Sec00Tools security level is
installed by default and is required to
secure your system either at
cold-install- or update-time or at a
later time.
OpenSSL
Security Considerations 45