Baseline Security Configuration for Tru64

Ann Majeske · *nix forums beginner Joined: 31 Mar 2005 Posts: 14

Hi Rhett,

The examples of Baseline Security Configurations you point to
appear to have been developed by the US Government based
on the Security Policy set up by the government. You need a
Security Policy first, before you can define a Baseline Security
Configuration. As an employee of HP working on the Tru64
UNIX OS, it's not my place to define a Security Policy for you as
it involves knowing lots of things about your configuration and
making decisions that only you (or your company) can make.
So, I will not give you a Security Policy or a Baseline Security
Configuration.

There's lots of places to go to get information on developing a
security policy. One good one is the SANS Institute:
http://www.sans.org/resources/policies/

If you think that a C2 level of security is adequate for your needs
based on the Security Policy you develop, there is information on
configuring your system to a C2 level of security in Appendix E of
the Security Administration manual.

If you think that the government security policies are adequate
for your needs based on the Security Policy you develop, it
looks like the link you provided has links to a generic UNIX
Baseline Security Configuration that you might be able to use.

Ann

<rhett.thompson@gmail.com> wrote in message
news:1137178956.223579.123420@f14g2000cwb.googlegroups.com...

rhett.thompson@gmail.com · *nix forums beginner Joined: 11 Jan 2006 Posts: 2

Hi Ann,

Thank you for responding. Yes I am aware of the Security
Administration Manual. What I am looking for a is a Baseline Security
Configuration. Basically a defined set of security parameters for the
system, that I can create a security configuration for the system. I
hope that I am being clear some examples of Security Baseline
configurations are located at http://csrc.nist.gov/pcig/cig.html there
are examples for WIndows based machines and some checklist. What I am
looking for is something similar, basically a document that shows a
detail security configuration and parameter settings to be used for a
system. I hope this help you understand what I am looking for....

Rhett

Ann Majeske wrote:

Ann Majeske · *nix forums beginner Joined: 31 Mar 2005 Posts: 14

What exactly do you mean by a Security Baseline Configuration?
You can get information on setting up your desired security configuration
in the Security Administration manual, but it is up to you to define your
security policy (what levels of security you need) first.

Ann

<rhett.thompson@gmail.com> wrote in message
news:1137002136.055037.168380@z14g2000cwz.googlegroups.com...

rhett.thompson@gmail.com · *nix forums beginner Joined: 11 Jan 2006 Posts: 2

Does anyone know how I can get a Security Baseline Configuration
document for Tru64?

Thanks

Rhett

Google