HP-UX 11i v3 September 2011 Release Notes, Edition 2

• LDAP-UX Integration: Version B.04.15 provides new LDAP user/group command-line tools.
• Red Hat Directory Server for HP-UX: Version B.07.10.30.01 mainly provides a SD defect fix.
• Thunderbird, ThunderbirdSrc: Updated to version 2.0.0.6. Fixes several security vulnerabilities
reported by the Mozilla Foundation.
March 2008 Release Notes, Chapter 8: “Security”
• HP-UX Auditing and Security Attributes Configuration: You will have access to both the Audit
Configuration functional area of legacy SAM and the auditing functionality in the HP-UX
Auditing and Security Attributes Configuration tool in HP SMH. Includes defect fixes.
• New: HP-UX Auditing System Extensions: Provides enhancements to the existing HP-UX auditing
system, audit(5). Offers tools to configure and enforce the data filtering policy for auditable
file operations on your system. Policy is rule-based and can be customized for different file
system partitions. Delivered as an optional product on all OEs.
• HP-UX Bastille: Updated to version B.3.0.31 incorporate defect fixes.
• HP-UX IPFilter: Updated to version 15.01 (A.11.31.15.01). Support for IPv6 interfaces;
Dynamic Connection Allocation (DCA) feature and ipftest utility now support IPv6 rules;
and more.
• New: HP-UX Role-based Access Control Extension: Introduces a set of privilege shells, allowing
a non-root user to automatically invoke privrun when needed by simply configuring a
privilege shell as their default shell. Includes integration with HP System Management
Homepage and integration of access control logic directly into select commands. Delivered
as an optional product in all OEs.
• HP-UX Secure Shell: Updated to version A.04.70.023. The sshd daemon defaults to SSH
Protocol 2 in new installations; SSH channel window size has been increased; ssh command
and sshd daemon now preserve MAC contexts between packets; new MAC algorithm has
been added; and more.
• HP-UX Software Assistant: Has replaced Security Patch Check. Messages indicating the
deprecation of Security Patch Check will be displayed when the Security Patch Check tool is
invoked. Support for Security Patch Check will be terminated on November 1, 2008.
• OpenSSL: Contains some important defect fixes.
March 2008 Release Notes, Chapter 9: “Commands and System Calls”
• intctl(1M) and intrbald(1M) Commands: Enhanced to allow manual and automatic interrupt
balancing based on user configuration files, with a choice of balancing algorithms.
• ioscan(1M) Command: Enhanced to show a new driver property that indicates if the driver
supports online instance number replacement.
• mpsched(1) Command: Enhanced so you can now change the affinity of a thread/light weight
process to a particular SPU or locality domain. You can also query the binding of a light-weight
process or unbind the same.
• rmsf(1M) Command: Enhanced to support Critical Resource Analysis (CRA) on a node or
special file before deleting it, and to support specifying a stale I/O node by hardware path.
• rtsched(1) Command: Enhanced to allow the change of the real time priority and/or scheduling
policy of a thread/light weight process with the -G option.
March 2008 Release Notes, Chapter 10: “Libraries and Programming”
• New: aC++ Linker Driver (aCC_link): Invokes the HP-UX linker. Command is made available
for linking aC++ objects for deployment on end-user systems. Explicitly disallows certain
62 What is new