Security Standards 2

[MrHPUX]

I was wondering if IBM has any standard documentation for making the base operating system more secure. Our security department is attemtping to put together a UNIX security policy and would like to start with the manufacturers recommendations.

Thanks,
Brian M. Fisher
Senior UNIX Systems Administrator
MeadWestvaco
Courthouse Plaza NE
Dayton, OH 45463
BMF5@MeadWestvaco.com
937-495-3557 - Phone
937-495-4088 - Fax

 

[aixqueen]

IBM has a 47 page pdf doc on:
Strengthening AIX Security: A System-Hardening Approach
March 26, 2002
Authors: David Batten
Antonio Joglar
Linda St. Clair
Susan Schreitmueller
Rebecca Sanchez

that is very helpful. I have not seen it on the web,
but perhaps your Business Partner can get you a copy


AIX Security Setup:

http://publib.boulder.ibm.com/doc_link/en_US/a_doc_lib/aixbman/baseadmn/security_setup.htm

IBM Redbooks:

AIX 4.3 Elements of Security: Also useful for AIX 5.1

http://www.redbooks.ibm.com/pubs/pdfs/redbooks/sg245962.pdf

Add'l AIX Security Tools: pSeries, SP & eCluster 1600

http://www.redbooks.ibm.com/pubs/pdfs/redbooks/sg245971.pdf

AIX System Security Audit:

http://techsupport.services.ibm.com/server/aix.techTips?refNo=90605195614808

Defining Restricted Logins:

http://techsupport.services.ibm.com/server/aix.techTips?refNo=90605221514612

Freeware Tools to Check for Common Security Exposures:

http://www.bullfreeware.com

<Click> Top 20 utilities
<Click> Security Tools

 

[GFitzG]

The System-Hardening doc (in PDF) can be accessed via:

http://www-1.ibm.com/servers/aix/whitepapers/aix_security.html