Choosing a Migration Path
Install-time Security Considerations
Chapter 244
Security Choice Dependencies
The Sec00Tools security infrastructure bundle is default-installed on
your system. While this bundle does not implement any security changes
at install- or update-time, it does ensure that the required software (see
Figure 2-1) is installed. By installing Sec00Tools, you can opt to run
HP-UX Bastille at a later time to lock down your system.
Alternately, you can lock down your system using one of the following
selectable security configuration bundles at install- or update-time:
• Sec10Host
• Sec20MngDMZ
• Sec30DMZ
These bundles are dependent on the Sec00Tools bundle.
Figure 2-1 Install-time Security Software Dependencies
Sec20MngDMZ
Sec10Host
Sec30DMZ
Sec00Tools
IPFilter
Security
Patch
Check
HP-UX
Bastille
HP-UX
Secure
Shell
perl
Selectable security bundles
Default-installed bundles
These selectable bundles lock down your
system at install- or update-time. They
depend on Sec00Tools to install the needed
software to secure your system.
This default-installed bundle does not apply
any security at install- or update-time.
Instead, it ensures that the following required
bundles are installed.
This default-installed software is required
to secure your system either at install-time
or at a later time.
