HP-UX Host Intrusion Detection System Release 4.1 Release Notes for HP-UX 11i v1 | HP-UX 11i v2 | HP-UX 11i v3

Known Problems, Limitations, and Fixes
For a current and complete list of HP-UX HIDS problems and their fixes, refer to the
Technical Knowledge Database on the HP IT Resource Center Websites:
• http://us-support.external.hp.com for Americas/Asia-Pacific customers
• http://europe-support.external.hp.com for European customers
The Technical Knowledge Database is available to customers with support contracts.
Clarifications
Perform Updates Instead of Cold Reinstalls
HP-UX HIDS is designed to support updates. If users cold reinstall the newer version
by first removing the older version (swremove), two reboots (instead of just one or
possibly none) will occur and there is the possibility of losing some configuration data.
Do not Change Permissions
Do not change the permissions on files and directories owned by ids. Opening up the
permissions to be world writable or readable causes the agent to fail security checks
and to exit. Changing file permissions also results in swverify errors.
Known Problems and Limitations
Error Encountered When Installing HP-UX HIDS 4.1
The following error can appear when installing HP-UX HIDS 4.1 even if J2SE 5.0 is
installed:
swinstall error: * Reading source for file information. The corequisite
"Jre15.JRE15,r>=1.5.0.02" for fileset "IDS.IDS-ADM-RUN, r=E.04.01.01"
cannot be successfully resolved.ERROR:The dependencies for fileset
"IDS.IDS-ADM-RUN,r=E.04.01.01" cannot be resolved (see previous lines). You
must resolve the above dependencies before operating on this fileset or
change the "enforce_dependencies" option to "false".
If this error is encountered and J2SE 5.0 is already installed, disable the enforcement
of dependencies by deselecting the swinstall Enforce dependency analysis
errors in agent option. Otherwise, install the latest version of J2SE 5.0 available
at: http://www.hp.com/go/java.
Issue with login-logout and failed-login Template on HP-UX 11i v3 Operating Systems
When HIDS on HP-UX 11i v3 is configured to run login-logout and/or failed-login
templates, the following message is logged in /var/opt/ids/error.log.
idssysdsp: file /var/adm/wtmp appears to be corrupted,
preventing HIDS from monitor logins & logouts registered
in the wtmp file
Known Problems, Limitations, and Fixes 19