Editing HP-UX (section)

==Security==
The 11i v2 release introduced kernel-based [[intrusion detection]], strong [[random number generation]], [[stack buffer overflow]] protection, security partitioning, role-based access management, and various open-source security tools.

HP classifies the operating system's security features into three categories: data, system and identity:<ref>{{cite web|url=http://www8.hp.com/ca/en/products/servers/hp-ux.html?compURI=1473753|title=Protect your environment|access-date=2014-07-22|publisher=[[Hewlett-Packard]]|archive-date=2014-07-27|archive-url=https://web.archive.org/web/20140727042420/http://www8.hp.com/ca/en/products/servers/hp-ux.html?compURI=1473753|url-status=dead}}</ref>

{| class="wikitable"
|-
! Category !! Security products
|-
| Data || Encrypted Volumes and File Systems, [[Trusted Computing]], [[whitelist]]ing, [[OS-level virtualization|containers]], [[IPsec]]
|-
| System|| Software Assistant, [[Hardening (computing)|Bastille]], Auditing System, [[IPFilter]], Host [[Intrusion detection system|IDS]], Standard Mode Security Extensions,<ref>{{cite web|url=https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=StdModSecExt|title=HP-UX Standard Mode Security Extension product details|access-date=2015-08-25|publisher=[[Hewlett-Packard]]|archive-url=https://web.archive.org/web/20141112144304/https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=StdModSecExt|archive-date=2014-11-12|url-status=dead}}</ref>
|-
| Identity|| [[Role-based access control|RBAC]], [[Pluggable authentication module|PAM]]-[[Kerberos (protocol)|Kerberos]], [[RADIUS|AAA]] server, [[Kerberos (protocol)|Kerberos]] server
|}

===Context dependent files===
Release 6.x (together with 3.x) introduced the context dependent files (CDF) feature, a method of allowing a [[fileserver]] to serve different configurations and binaries (and even architectures) to different client machines in a heterogeneous environment. A directory containing such files had its [[setuid|suid]] bit set and was made hidden from both ordinary and root processes under normal use. Such a scheme was sometimes exploited by intruders to hide malicious programs or data.<ref>[http://www.selftesttraining.com/hp-certifications.html HP certifications]</ref> CDFs and the CDF filesystem were dropped with release 10.0.