HP UX Bastille Software manual HPUX.guibanner, HPUX.mailconfig, HPUX.ndd

Default	N
Description	The ftpusers file allows the administrator to set accounts that shall not be
	allowed to log in through the ftpd. Default system users should not be allowed
	access to the system through the ftpd because it sends the username and
	password in clear text over the network. HP-UX Bastille disallows ftp logins
	to a WU-FTPD server from the following users: root, daemon, bin, sys, adm,
	uucp, lp, nuucp, hpdb, and guest. If you have a compelling reason to allow
	these users ftp access, then answer no to this question. Use this as a secondary
	measure if you deactivated the ftp server.
Actions	Add the following user names to the /etc/ftpd/ftpusers file: root,
	daemon, bin, sys, adm, uucp, lp, nuucp, hpdb, and guest.

HP_UX.gui_banner

Headline	Set up a login banner for graphical login.
Default	N
Description	Setting a GUI login banner notifies users that they may use the system, but
	they are subject to local policy and monitoring. It also serves as notification
	that the system is not for public use. This helps eliminate the claims of "I
	thought anyone could use it."
Actions	For all Xresources files in /usr/dt/config/* directories, modify the
	matching /etc/dt/config/*/Xresources file by adding the following
	lines:
	Dtlogin*greeting.labelString: "Authorized users only. All activity may be monitored and
	reported."
	Dtlogin*greeting.persLabelString: "Authorized users only. All activity may be monitored
	and reported."
	Create the matching /etc/dt/config/*/Xresources files if not present.

HP_UX.mail_config

Headline	Allow mailing of your configuration and TODO.txt files to HP.
Default	N
Description	The HP-UX Bastille development team would like to know how you use
	HP-UX Bastille. Based on how you answer these questions, HP can meet your
	needs better. You can help by sending your configuration and TODO.txt files
	back to HP. Answering yes to this question does that automatically. If you
	feel that your hostname or your security configuration is confidential,
	answerno. The information is sent unencrypted over the public Internet. If
	outbound mail is unable to reach the Internet from this machine, answer no.
	If you have suggestions for improvements, new questions, code, or tests,
	discuss these on the Bastille Linux discussion list at: http://lists.sourceforge.net/
	mailman/listinfo/bastille-linux-discuss. You can provide feedback concerning
	HP-UX Bastille directly to the IT Resource Center at http://itrc.hp.com, using
	the System Administration or Security forum. Please send all comments. We
	want to hear from you.
Actions	Mail the /etc/opt/sec_mgmt/bastille/config and /var/opt/
	sec_mgmt/bastille/TODO.txt files to HP so we can improve HP-UX
	Bastille.

HP_UX.ndd

Headline	Make suggested ndd changes.
Default	N
Description	The ndd utility gets and sets network device parameters. The following is a
	list of ndd changes HP-UX Bastille sets:

42 Question modules