4 Removing HP-UX Bastille

Use the swremove command to remove HP-UX Bastille from an HP-UX machine. When HP-UX Bastille is removed, the system does not revert to the state it was in before HP-UX Bastille was installed. HP-UX Bastille removal leaves behind the revert-actionsscript. This script enables the administrator to revert the configuration files that HP-UX Bastille modified without an HP-UX Bastille installation. In most cases, HP-UX Bastille changes are recorded at the file level, so the revert-actionsscript only reverts the modified files. Other changes can be reverted programmatically, even if you made intervening changes in the same file. For example, the permissions file can be reverted to its original form even if you modified the file.

To revert changes on a system where HP-UX Bastille is removed:

1.# cd /var/opt/sec_mgmt/bastille/revert/

2.# chmod 0500 revert-actions

3.# ./revert-actions

4.# mv revert-actions revert-actions.last

5.Check for a TOREVERT.txt file.

/var/opt/sec_mgmt/bastille/TOREVERT.txt

If the file exists, complete the actions listed.

19