HP-UX 11i v3 March 2012 Release Notes

(authentication, integrity, confidentiality) over IP networks between systems and devices that
implement the IPsec protocol suite.
• HP-UX Secure Shell: Updated to version A.04.40.005 with new features including an sftp
only solution in a chroot environment; TCP wrappers support for IPv6; Standard Mode
Security Extensions (SMSE) enhanced to provide the “Audit all users and events” feature; and
other features, as well as defect fixes.
• HP-UX Security Attributes Configuration tool (secweb): Updated to support long user name.
• New: HP-UX Standard Mode Security Extensions: Now part of the core OS; provides a new
command and new library functions. Shadow passwords are now also supported with NIS.
• Install-Time Security: Updated to version 1.0.4 with new questions/configuration, diagnostic
daemon configure to local-only use (not network), and syslog local-only.
• Kerberos Client: Updated to version 1.3.5.03 with new features including support for powerful
cryptographic algorithms like 3DES, RC4, and AES; support for IPv6; support for TCP; and
defect fixes.
• OpenSSL: Updated to version A.00.09.08b.09.07j with support (in default version) for several
hardware ENGINES (see section for specifics); support for elliptic curve cryptography; and
EVP, the library of which provides a high-level interface to cryptographic functions. Other
provided versions include other features.
• PAM Kerberos: Enhanced to issue a warning if rc_host_0 is owned by anyone other than
root when a user tries to rlogin into a system; will also issue a warning if the keytable entry
is not found for the host service principal on the client but present at the KDC.
• Security Patch Check: Updated to incorporate defect fixes.
Initial (February 2007) Release Notes, Chapter 9: “Commands and System Calls”
• /etc/skel/.profile shell script: . (current path) in $PATH is deprecated.
• 32-bit pstat System Call (Deprecated): When compiling a 32-bit application that uses the
pstat () system call, the compiler option -D_PSTAT64 must now be specified. This causes
pstat () to use 64-bit fields rather than 32-bit fields. The application still remains a 32-bit
application.
• at , cron, and batch Commands: New features include support for queueing multiple jobs
at the same time, support for queueing of more than 100 jobs, and ability to schedule jobs
up to the njob limit specified for every queue in queuedefs(4).
• core Format Implementation Change: The true version string has replaced the utsname struct
in the CORE_KERNEL segment. A workaround has been provided for applications which
reversed-engineered the core file format and depend on utsname being in it. This new core
file format is now the default format.
• csh Command Line Interpreter: The non-interactive invocation of csh will not source the ~/
.history file by default.
• File Systems Backup and Recovery Commands fbackup, frecover, and ftio: Deprecated;
will be obsolete in a future HP-UX release. You should prepare by migrating to the favorable
replacement pax. Support will be continued for archive retrieval.
• New: gcore Command: creates a core image of each specified process.
• getgroups(), setgroups(): no longer limited by the NGROUPS_MAX.
• getty Command: Enhanced to configure the default setting for special control characters
(erase, kill, etc.) by the user.
• HP-UX Kernel Configuration Commands: Includes several significant changes including revision
of error, warning, and note messages for clarity; new options for kconfig, kcmodule, and
kctune for control of automatic configuration backups; 2 new options for kctune command;
What is new in the initial (February 2007) HP-UX 11i v3 release 97