Install Additional Products

I l @ ve RuBoard

If there are any additional products which need to be loaded to support the services which the server is to support, they should be loaded at this point so that they can be secured along with the base operating system. Careful evaluation should be done to assure that only necessary software is installed.

HP-UX 11i

At this point, install any additional software which is needed. swinstall provides the ability to install software from local media or over the network from a software depot. Install whatever software which is needed for the applications which the server will be running and any additional security software which will be used.

HP-UX provides encrypted communication with IPSec and SSL, access control with IPFilter and TCPWrapper, system hardening with Bastille/UX, and intrusion detection with IDS/9000.

Linux

The Red Hat package manager, rpm , provides the ability to install software from local sources or over the network using a variety of protocols, including nfs , ftp, and http . This provides tremendous flexibility in software distribution but it increases the need to enforce using only trusted software sources. A secure system should load only software from local media or over a secure network from a known and trusted source.

I l @ ve RuBoard