HP Tru64 UNIX Technical Updates for the Version 5.1B and Higher Operating System and Patches (February 2010)

XEmacs Displays Confusing Message (Sept. 2004)
The following message is displayed when starting XEmacs Version 21.4.
% emacs
Loading xlib-math...
Loading xlib-math...done
Loading xwem-compat...
Loading xwem-compat...done
You can ignore this message.
Configuring IPsec (Feb. 2004)
The SSRT3674 - HP Tru64 UNIX IPsec/IKE Potential Security Vulnerability HP Security Bulletin
identifies a potential security vulnerability in the HP Tru64 UNIX operating system using
IPsec/IKE (Internet Key Exchange) with Certificates. The potential vulnerability may be remotely
exploitable, resulting in unauthorized privileged access.
HP has corrected this potential vulnerability by releasing an Early Release Patch Kit
(T64KIT0021591-V51BB24-ES-20040216.tar) and the following updated documentation. The
updated functionality allowing for restriction of remote identities (IDs) is outlined in step 12 for
securely configuring a host or gateway. This updated functionality is only available after installing
the SSRT3674 Early Release Patch Kit (ERP) and will be available in the Version 5.1B PK4 Service
Pack.
Use the SysMan Menu application of the Common Desktop Environment (CDE) Application
Manager to configure IPsec. This section describes how to configure your system as either an
IPsec host or a secure gateway.
Configuring a Host
To configure IPsec on a host, follow these steps:
1. From the SysMan Menu, select Networking→Additional Network Services→Configure
Internet Protocol Security (IPsec) to display the IPsec main window.
Alternatively, enter the following command on the command line:
# /usr/sbin/sysman ipsec
If you are configuring IPsec for the first time, an informational dialog box is displayed that
tells you to define secure connections before enabling IPsec. If you enable IPsec without
defining secure connections, all packets into and out of the system are discarded; no traffic
will flow. Select OK.
The IPsec main window displays configured secure connections and configured public-key
certificates.
2. Select Enable IP Security (IPsec) at the top of the window.
3. Select Add. The Add/Modify a Secure Connection dialog box is displayed.
4. Enter a connection name.
5. Select Add to add a remote IP address selector. The Add/Modify Selector dialog box is
displayed. Do the following:
a. Select a selector type.
b. Do one of the following:
• If you are communicating with a single host, enter the IP address.
• If you are communicating with a secure gateway, enter the subnet address.
• If you are communicating with a range of addresses, enter the first address.
c. For an IP subnet, enter the size of the subnet mask.
d. For a range of addresses, enter the last address.
e. Select an upper layer protocol to match. By default, all protocols are selected.
Operating System and Associated Products Updates 25