[ILUG] Security Test Plans for HP-UX server.Suggestions?

[Jane Shaw]

Hi,
I have recently become system administrator of a HP-UX box in a global 
company. I do not have any UX experience, and would appreciate any 
comments/details/suggestions on the issue of securing access to the box. It 
sits outside the firewall, and needs to be accessed by users from several 
different countries, as well as users based here. These users are from 
several different departments and should normally only have access to 
certain files relevant to them. I was thinking of making them members of 
groups with predefined privileges, except that in certain cases, users need 
to access files not permitted by their group. Suggestions? I had also 
considered restricting access to the box based on IP address. Does anybody 
know how this can be done under UX? Other issues I had considered were:
1. Upon two unsuccessful login attempts, an alarm should be generated to 
sysadmin.
2. Successful modifications to critical files should be alarmed to sysadmin
3. Display time and date of last successful login for all logins.
4. Terminate an inactive session after 30 mins.
If anyone has dealt with similar security issues, under UX, or any other 
Unix O.S. I would appreciate the help. As I am new to UX, command details 
would be very useful.
Thanking you in advance for your help,
Jane Shaw.
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.