HP-UX 11i v3 September 2011 Release Notes, Edition 2

• New: Network Interface Management Command Line Interface: The nwmgr command is used
to manage LAN-based and IB-based network interfaces; a single tool for performing all network
interface-related tasks.
• New: Network Interfaces Configuration and Network Services Configuration: These tools in
the HP System Management Homepage replace the Networking and Communications functions
of the System Administration Manager (SAM), which are no longer available.
• Red Hat Directory Server for HP-UX: Updated to version B.07.10.20 to incorporate defect
fixes.
• STREAMS: NOSYNC feature allows multiple instances of a put procedure for a queue and the
service routine for that queue to run concurrently. All references to the global variable
uniprocessor have been removed.
• NetTL - Network Tracing and Logging: The nettl command is enhanced with formatting
support for IPoIB header, new command-line option to configure trace buffer timer value,
support for pre-capture trace filters, and new command-line options to manage trace filters.
Initial (February 2007) Release Notes, Chapter 8: “Security”
• HP-UX 11i Security Containment: Fine-grained privileges and compartments are now part of
the core.
• HP-UX Auditing System: Enhanced in several ways, including: Standard Mode Auditing now
part of core products; multi-threaded kernel audit daemon is now dedicated in logging the
data into configurable number of files for better performance; collected audit data are more
comprehensive; and several other enhancements.
• HP-UX Bastille: With version B.3.0.20, new enhancements, capabilities, features, and benefits
(including bastille_drift analysis) represent additional items that Bastille will be able to lock
down, additional usability improvements, and a new ability for Bastille to check a given system
against a security baseline or report on the security-configuration state of a system.
• HP-UX IPFilter: Updated to version A.03.05.13 with defect fixes and enhancements including
filtering on X.25 interfaces, filtering on 10GigE interfaces; IPFilter not plumbed into the
networking stack by default; no reboot required to enable IPFilter.
• New: HP-UX IPSec: Previously only available on the AR media. Now delivered on the HP-UX
11i v3 Operating Environments. Provides an infrastructure to allow secure communications
(authentication, integrity, confidentiality) over IP networks between systems and devices that
implement the IPsec protocol suite.
• HP-UX Secure Shell: Updated to version A.04.40.005 with new features including an sftp
only solution in a chroot environment; TCP wrappers support for IPv6; Standard Mode
Security Extensions (SMSE) enhanced to provide the “Audit all users and events” feature; and
other features, as well as defect fixes.
• HP-UX Security Attributes Configuration tool (secweb): Updated to support long user name.
• New: HP-UX Standard Mode Security Extensions: Now part of the core OS; provides a new
command and new library functions. Shadow passwords are now also supported with NIS.
• Install-Time Security: Updated to version 1.0.4 with new questions/configuration, diagnostic
daemon configure to local-only use (not network), and syslog local-only.
• Kerberos Client: Updated to version 1.3.5.03 with new features including support for powerful
cryptographic algorithms like 3DES, RC4, and AES; support for IPv6; support for TCP; and
defect fixes.
• OpenSSL: Updated to version A.00.09.08b.09.07j with support (in default version) for several
hardware ENGINES (see section for specifics); support for elliptic curve cryptography; and
EVP, the library of which provides a high-level interface to cryptographic functions. Other
provided versions include other features.
What is new in the initial (February 2007) HP-UX 11i v3 release 89