Host Intrusion Detection System Release 3.0 Release Notes

Installation
Making Depots
Chapter 2
21
NOTE If you have installed any software updates, some of these patches may already be
present on your systems. You can first install the HP-UX HIDS software and run the
/opt/ids/bin/IDS_checkInstall command to check the patches that you do not need
to download.
If you attempt to install a patch that is already there, the swinstall command will note
that fact and just install the other patches.
Step 1. Log in as superuser (root) on the depot system; see “Create the Depot Directory” on
page 20.
Step 2. Create a directory where you can save the patches and make a temporary depot. We’ll
use /var/tmp/idspatch_11i.
Step 3. Using the Internet, go to the HP Support web site http://itrc.hp.com,
Step 4. Click on the link individual patches.
NOTE You must be registered before you can download patches.
Step 5. Using the instructions on the web site, download the patches listed in Table 2-4 on
page 22 into /var/tmp/idspatch_11i.
NOTE Note the following:
• Some patches may have dependency patches: patches that must be installed first.
Click the dependency links and download the dependency patches, too.
• Some patches may be superseded. You can choose either the patch we list or the
superseded patch.
Step 6. Unpack the patch file sets into their separate depots:
# sh -c ’for i in /var/tmp/idspatch_11i/PH*; do sh $i; done’
Step 7. Copy the patches to your agent and administration depots as appropriate:
a. 11i Agent Depot
If any of your agent systems is running HP-UX 11i v1, copy the 11i IDS-KERN
product and IDS agent subproducts into the ids_11i_agent depot:
# swcopy -s /var/tmp/idsprod/HPUX-HIDS_11i.depot IDS-KERN
IDS.IDS-AGT-RUN \
IDS.IDS-ENG-A-MAN @ /var/depot/ids_11i_agent
b. 11i Admin Depot
If your administration system will not be running an agent, skip this step.
c. 11i Admin+Agent Depot
If your administration system is running HP-UX i v1 and will be running an agent,
copy the patch depots into the ids_11i_admin+agent depot:
# sh -c ’for i in /var/tmp/idspatch_11i/PH*.depot; \
do swcopy -s $i \* @ /var/depot/ids_11i_admin+agent; done’