sometimes configured to provide network services to other systems. Disable
these services unless you know of a specific reason to leave them enabled.
Actions
Kill processes: mrouted, rwhod, rarpd, rdpd, snapdaemon
Set MROUTED=0 in /etc/rc.config.d/netdaemons
Set RWHOD=0 in /etc/rc.config.d/netdaemons
Set RARPD=0 in /etc/rc.config.d/netconf
Set RDPD=0 in /etc/rc.config.d/netconf
Set START_SNAPLUS=0 in /etc/rc.config.d/snaplus2
Patches.spc_cron_run
Headline
Set up a
cron
job to run SWA or SPC.
Default
Y
Description
HP-UX Bastille can configure Software Assistant (SWA), or Security Patch
Check (SPC) to run daily using the
cron
scheduling daemon. Keeping a system
secure requires constant vigilance. Staying up-to-date on security bulletins
issued by Hewlett-Packard is critical. These tools are the easiest way to make
sure this system is compliant with the steps required in HP security bulletins.
A subscription to the HP security bulletin mailing list provides the latest
security fixes from HP.
NOTE:
This question is asked whether or not you have Software Assistant,
or Security Patch Check installed so that HP-UX Bastille can pre-configure
cron
to run these applications after they are installed.
NOTE:
HP recommends SWA. SPC uses FTP, a clear-text, unauthenticated
protocol.
Register for notification of all HP security bulletins at
http://www.itrc.hp.com
.
Click on
Maintenance and Support for HP Products
then select
Support
Information Digests
.
Actions
Set a daily
cron
job to run SWA or SPC.
Patches.spc_cron_time
Headline
Set hour for a security bulletin compliance report.
Default
11
Description
Specify a number between 0 and 23, corresponding to the hour in your time
zone that is most convenient to run a security bulletin compliance report. For
example, if you specify 0, Security Patch Check runs between 12:00 A.M. and
12:59 A.M. in your local time zone. If you specify 23, the security bulletin
compliance report runs between 11:00 P.M. and 11:59 P.M.
Actions
Parameter only.
Patches.spc_proxy_yn
Headline
Does this machine require a proxy to
ftp
to the Internet?
Default
N
Description
Sets
spc_proxy_yn
.
Actions
None.
Patches.spc_run
Headline
Run SWA/SPC.
Default
Y
Description
Patching, updating, and configuring software to address known security
vulnerabilities is important for securing a system. SWA and SPC are tools
54
Question modules
