PCI-DSS Compliance for an HP-UX Host

20
For more information about HP-UX Bastille, see Bastille Support Manuals.
Click to download HP-UX Bastille.
HP-UX Secure Shell
For more information about Secure Shell, see HP-UX Secure Shell Support Manuals.
Click to download HP-UX Secure Shell.
HP-UX EVFS
EVFS volumes (EVS mode) are configured as pseudo-devices below the HP-UX file system. EVFS volumes are
“Application Transparent”, that is, applications in User space will not notice any changes and neither will they have
Bindapachenic Would you like to bind the web server to a particular
interface?
Bindapacheaddress Address to bind the web server to? [127.0.0.1]
Symlink Would you like to deactivate the following of
symbolic links? [Y]
Ssi Would you like to deactivate server-side includes?
[Y]
Cgi Would you like to disable CGI scripts, at least for
now? [Y]
Apacheindex Would you like to disable indexes? [N]
Chrootapache Would you like to chroot your HP Web Services
Apache Server? [N]
SecureInetd tcpd_default_deny Would you like to set a default-deny on TCP
Wrappers and xinetd? [N]
deactivate_telnet Should Bastille ensure the telnet service does not
run on this system? [y]
YES
deactivate_ftp Should Bastille ensure inetd’s FTP service does not
run on this system? [y]
YES
deactivate_rtools Should Bastille ensure that the login, shell, and exec
services do not run on this system?
YES
deactivate_tftp Should Bastille ensure inetd’s TFTP service does not
run on this system?
YES
deactivate_bootp Should Bastille ensure inetd’s bootp service does not
run on this system?
YES
deactivate_finger Should Bastille ensure inetd’s finger service does not
run on this system?
YES
deactivate_uucp Should Bastille ensure inetd’s uucp service does not
run on this system?
YES
deactivate_ntalk “Should Bastille ensure inetd’s ntalk service does
not run on this system?
YES
deactivate_ident Should Bastille ensure inetd’s ident service does not
run on this system?
YES
deactivate_builtin Should Bastille ensure that inetd’s built-in services
do not run on this system?
YES
deactivate_time Should Bastille ensure that inetd’s time service does
not run on this system?
YES