PCI-DSS Compliance for an HP-UX Host

HP-UX RBAC provides a set of configuration files:

 auths config file to define all valid authorizations

 cmd_priv config file containing command and file authorizations and privileges

 role_auth, to define the authorizations for each role

 roles config file ,to define roles

 user_role config file, to define the roles for each user, through which authorizations, roles and their mappings

can be defined

Plan the required roles for users, plan the authorizations required for the roles, and then plan the authorization-to-

command mappings.

HP-UX RBAC supplies previously mentioned configurations with privileges only to the administrator, these

configuration files can be modified accordingly to restrict access to admin and users.

HP recommends the following suggestions for the root account apart from using the HP-UX RBAC:

 Do not share the root password.

 Do not use / as the root home directory.

 Examine output from last -R and lastb -R for unusual or failed root logins and to see who has logged in as root.

 Examine /var/adm/sulog for attempts to use the su root command.

 Look for unauthorized accounts with a UID of zero (0); use the logins –d command.

For more information about HP-UX RBAC, see HP-UX RBAC Support Manuals.

Click to download HP-UX RBAC.

HP-UX Directory Server and LDAP-UX

For more information about HP-UX Directory Server, see HP-UX DS Support Manuals.

Click to download HP-UX Directory Server.

For more information about LDAP-UX, see LDAP-UX Support Manuals.

Click to download LDAP-UX.

HP-UX AAA Server

For more information about HP-UX AAA Server, see HP-UX AAA Server Support Manuals.

Click to download HP-UX AAA Server.

HP-UX Auditing and Auditing System Extensions

For more information about HP-UX Auditing, see HP-UX Auditing Support Manual.

Click to download HP-UX Auditing System Extensions.

HP-UX Whitelisting

For more information about HP-UX Whitelisting, see HP-UX WLI Support Manual.

Click to download HP-UX Whitelisting.

HP-UX HIDS

For more information about HP-UX HIDS, see HP-UX HIDS Support Manuals.

Click to download HP-UX HIDS.