HP 5187-2725 사용자 설명서
Choosing a Migration Path
Install-time Security Considerations
Chapter 2
44
Security Choice Dependencies
The
Sec00Tools
security infrastructure bundle is default-installed on
your system. While this bundle does not implement any security changes
at install- or update-time, it does ensure that the required software (see
Figure 2-1) is installed. By installing
at install- or update-time, it does ensure that the required software (see
Figure 2-1) is installed. By installing
Sec00Tools
, you can opt to run
HP-UX Bastille at a later time to lock down your system.
Alternately, you can lock down your system using one of the following
selectable security configuration bundles at install- or update-time:
selectable security configuration bundles at install- or update-time:
•
Sec10Host
•
Sec20MngDMZ
•
Sec30DMZ
These bundles are dependent on the
Sec00Tools
bundle.
Figure 2-1
Install-time Security Software Dependencies
Sec20MngDMZ
Sec10Host
Sec30DMZ
Sec00Tools
IPFilter
Security
Patch
Check
HP-UX
Bastille
HP-UX
Secure
Shell
perl
Selectable security bundles
Default-installed bundles
These selectable bundles lock down your
system at install- or update-time. They
depend on Sec00Tools to install the needed
software to secure your system.
system at install- or update-time. They
depend on Sec00Tools to install the needed
software to secure your system.
This default-installed bundle does not apply
any security at install- or update-time.
Instead, it ensures that the following required
bundles are installed.
any security at install- or update-time.
Instead, it ensures that the following required
bundles are installed.
This default-installed software is required
to secure your system either at install-time
or at a later time.
to secure your system either at install-time
or at a later time.