HP-UX Host Intrusion Detection System Release 4.1 Release Notes for HP-UX 11i v1 | HP-UX 11i v2 | HP-UX 11i v3

Workaround
Use the grep command to locate any instances of the TEMPLATE pattern. Schedules
containing the TEMPLATE pattern are in the incorrect (expanded) format and must be
migrated (using the migrator tool) to an HIDS v4.1 compatible format.
IMPORTANT: The GUI System Manager must be closed before running the migrator
tool or before manually editing a Surveillance Schedule or Group in a text editor.
Otherwise, changes made by the migrator tool or editor will be overwritten by the GUI
System Manager when it exits.
The following example illustrates the usage of the migrator tool:
> cd /etc/opt/ids/schedules
> grep TEMPLATE FileAndLoginMonitoringAlwaysOn.txt
TEMPLATE append_only
ENDTEMPLATE
TEMPLATE read_only
ENDTEMPLATE
TEMPLATE setuid
ENDTEMPLATE
TEMPLATE world_writable
ENDTEMPLATE
TEMPLATE non_owned
ENDTEMPLATE
TEMPLATE login_logout
ENDTEMPLATE
TEMPLATE failed_login
ENDTEMPLATE
TEMPLATE failed_su
ENDTEMPLATE
> /opt/ids/bin/migrator -i FileAndLoginMonitoringAlwaysOn.txt
INFO: : Attempting to parse schedule file...
INFO : Successfully parsed schedule file
(FileAndLoginMonitoringAlwaysOn.txt).
INFO : The schedule and group(s) will be created in
(/etc/opt/ids/schedules) and (/etc/opt/ids/schedules/groups)
respectively.
INFO : Attempting to create ASCII schedule and group(s) files.
INFO : Writing to schdule file
(/etc/opt/ids/schedules/FileAndLoginMonitoringAlwaysOn.txt)
SUCCESS : Created the schedule file in output
directory (/etc/opt/ids/schedules)
> grep TEMPLATE FileAndLoginMonitoringAlwaysOn.txt
>
The GUI Schedule Manager Does not Validate Modifications to pathnames_X/programs_X
Template Properties
The GUI Schedule Manager saves modifications made to the template properties in
Surveillance Groups without validating that the Surveillance Schedules and Groups
can be successfully parsed. Incorrect modifications to the Surveillance Schedules and
Groups, including incorrect modifications to template property values, are only detected
when the GUI System Manager attempts to activate the schedule or when the GUI
Known Problems, Limitations, and Fixes 21