|
Title. |
AutoUpdate
56 Release information
|
|
Introduction |
This
Assuria Bulletin announces the availability of AutoUpdate 56, which
introduces new features to Assuria Auditor. These features have been
added as a result of user requests.
-
Global Policy Variable
Configuration
-
Exception Configuration
-
Import of Agent Result
Files
-
XPU Integrity
Enhancements
-
XPU Integrity - New
Platform Support
-
Package Baseline
-
Bug Fixes
This
AutoUpdate is fully compatible with the Assuria Auditor and ISS System
Scanner range of products, and is managed by the Assuria Auditor Console
(formerly ISS System Scanner Console).
|
|
Global Policy Variable Configuration
|
Previously, in order to override the default value of a variable in a
policy, a user would be required to create a new policy. The new policy
would then be out of step with any additional updates provided by
Assuria. This new functionality allows a user to define global policy
overrides on a per Agent basis.
To use this new functionality :
-
Select an Agent and then
open the check config sub-folder
-
Locate and select the
policyVariables file
-
Then
find and double click on the variable you would like to change
-
You can then save the
changes either to the Agent or the Agent's class
|
|
Exception Configuration
|
Agents can now have their exception configuration set, or reset, by
copying the list from another Agent in the Assuria Auditor Console,
without having to run a scan or set up the information manually.
To copy the exception configuration:
-
Highlight the new Agent
in the left hand tree view
-
Right click and select
"Copy Configuration from ... "
-
Select the Agent from
which you wish to copy the exception configuration
-
Ensure that the Copy
Exception List checkbox is ticked
-
Click OK
|
|
Import of Agent Result Files
|
The results from scans on Agents which cannot be imported directly into
the Console. For example an external Auditor without network access to a
server or an Auditor using a laptop. Other reasons could be network
security or access problems, can now be imported into the Assuria
Auditor Console database manually.
To use this functionality copy the results file to a known location on
the Console computer, using for example FTP or a USB drive, and select
from the menu Maintenance -> Import (Change when moved to correct
location).
NOTE: This facility is only supported for files created on Agents
at AutoUpdate 56 or later.
|
|
XPU Integrity Enhancements
|
XPU Integrity has been enhanced to remove false positives and by adding
an additional policy. xpu-integrity-summary can now be run on a large
number of Agents to gain a class overview of current update status and
to quickly pinpoint and diagnose problems. The original xpu-integrity
policy remains and can be used for more in-depth analysis on a single
Agent basis.
|
|
XPU Integrity - New Platform Support
|
XPU Integrity has now been added for the following platforms
|
|
Package Baseline
|
Package baselining has now been added for the following platforms
|
|
Bug Fixes
|
The following issues have been fixed with this release
-
Solaris 10 services that
contain a '-' character are now profiled correctly
-
XPU integrity has been
updated on windows platforms to remove incorrect matches
-
The Policy Editor now
correctly allows the V5 password check to be viewed
-
The procs directory on
AIX is now ignored for alllocalfiles
-
The Console option Number
of Retries now correctly named and does not allow a value of zero
The full manifest of new and changed files for this update can be viewed
here
|
|
Console
updates
|
Updated
Files
o bin/tcl/db.tbc
o bin/tcl/host.tbc
o bin/tcl/hostconfig.tbc
o bin/tcl/hostset.tbc
o bin/tcl/main.tbc
o bin/tcl/RulesetEditor.tbc
o bin/tcl/file.tbc
o bin/tcl/treeutils.tbc
o
etc/icons/update.gif
o chelp/updates.html
o chelp/updates-4.0.html
o chelp/updates-4.1.html
o chelp/updates-4.2.html
|
|
Agent
updates
|
Updates are
included for the following agents:
o IBM
AIX 4.3.3 and later
o HPUX
(Version 10.20) (PA-RISC)
o HPUX
(Version 11.00, 11.11, 11.23) (PA-RISC)
o Red
Hat Enterprise Linux 3 (x86), 4 (x86) and 4 (x64)
o Sun
Solaris 8 (SPARC)
o Sun
Solaris 9 (SPARC)
o Sun
Solaris 10 (SPARC)
o
Microsoft Windows 2000 (x86) Professional
o
Microsoft Windows 2000 (x86) Server
o
Microsoft Windows 2003 (x86) Server
|
|
IBM AIX
4.3.3 or later
|
o New
Checks
- xpu-integrity-summary
o New
Policies
- xpu-integrity-summary
o
Updated Files
-
bin/procs/tools.tcl
-
bin/checker
-
etc/iss_platforms
o
X-Press Update Files
-
rules/unarchiveCheck
-
rulesets/unarchivePolicy
-
signatures/rules/unarchiveCheck.sgn
-
signatures/rulesets/unarchivePolicy.sgn
-
lib/xpud3_56.zip
-
lib/xpud3_56.sgn
|
|
HPUX
(Version 10.20) (PA-RISC)
|
o New
Checks
-
package-added
-
package-deleted
-
package-changed
-
updatePackageBaseline
-
xpu-integrity
-
xpu-integrity-summary
o New
Policies
-
UpdatePackageBaseline
-
packages
-
xpu-integrity
-
xpu-integrity-summary
o New
Files
- bin/procs/proc_packages.tcl
- etc/iss_platforms
-
lib/tcl8.3/crc/cksum.tcl
-
lib/tcl8.3/crc/crc16.tcl
-
lib/tcl8.3/crc/crc32.tcl
-
lib/tcl8.3/crc/crcc.tcl
-
lib/tcl8.3/crc/pkgIndex.tcl
-
lib/tcl8.3/crc/sum.tcl
-
lib/tcl8.3/tclindex
o
Updated Files
-
bin/checker
- bin/procs/tools.tcl
- bin/procs/proc_packages.tcl
o
X-Press Update Files
-
rules/unarchiveCheck
-
rulesets/unarchivePolicy
-
signatures/rules/unarchiveCheck.sgn
-
signatures/rulesets/unarchivePolicy.sgn
-
lib/xpud3_56.zip
-
lib/xpud3_56.sgn
|
|
HPUX
(Version 11.00, 11.11, 11.23) (PA-RISC)
|
o New
Checks
-
package-added
-
package-deleted
-
package-changed
-
updatePackageBaseline
- xpu-integrity
- xpu-integrity-summary
o New
Policies
-
UpdatePackageBaseline
-
packages
-
xpu-integrity
-
xpu-integrity-summary
o New
Files
-
bin/procs/proc_packages.tcl
-
etc/iss_platforms
-
lib/tcl8.3/crc/cksum.tcl
-
lib/tcl8.3/crc/crc16.tcl
-
lib/tcl8.3/crc/crc32.tcl
-
lib/tcl8.3/crc/crcc.tcl
-
lib/tcl8.3/crc/pkgIndex.tcl
-
lib/tcl8.3/crc/sum.tcl
-
lib/tcl8.3/tclindex
o
Updated Files
-
bin/checker
-
bin/procs/tools.tcl
-
bin/procs/proc_packages.tcl
o
X-Press Update Files
-
rules/unarchiveCheck
-
rulesets/unarchivePolicy
-
signatures/rules/unarchiveCheck.sgn
-
signatures/rulesets/unarchivePolicy.sgn
-
lib/xpud3_56.zip
-
lib/xpud3_56.sgn
|
|
RHEL Red
Hat Enterprise Linux 3 (x86), 4 (x86) and 4 (x64)
|
o New
Checks
-
package-added
-
package-deleted
-
package-changed
-
updatePackageBaseline
-
xpu-integrity
-
xpu-integrity-summary
o New
Policies
-
UpdatePackageBaseline
-
packages
-
xpu-integrity
-
xpu-integrity-summary
o New
Files
- bin/procs/proc_packages.tcl
-
lib/tcl8.3/crc/cksum.tcl
-
lib/tcl8.3/crc/crc16.tcl
-
lib/tcl8.3/crc/crc32.tcl
-
lib/tcl8.3/crc/crcc.tcl
-
lib/tcl8.3/crc/pkgIndex.tcl
-
lib/tcl8.3/crc/sum.tcl
-
lib/tcl8.3/tclindex
o
Updated Files
-
bin/procs/tools.tcl
-
bin/procs/proc_packages.tcl
o
X-Press Update Files
-
rules/unarchiveCheck
-
rulesets/unarchivePolicy
-
signatures/rules/unarchiveCheck.sgn
-
signatures/rulesets/unarchivePolicy.sgn
-
lib/xpud3_56.zip
-
lib/xpud3_56.sgn
|
|
Sun Solaris
8 (SPARC)
|
o New
Checks
-
xpu-integrity-summary
o New
Policies
-
xpu-integrity-summary
o
Updated Files
- bin/procs/tools.tcl
o
X-Press Update Files
-
rules/unarchiveCheck
-
rulesets/unarchivePolicy
-
signatures/rules/unarchiveCheck.sgn
-
signatures/rulesets/unarchivePolicy.sgn
-
lib/xpud3_56.zip
-
lib/xpud3_56.sgn
|
|
Sun Solaris
9 (SPARC)
|
o New
Checks
-
xpu-integrity-summary
o New
Policies
-
xpu-integrity-summary
o
Updated Files
-
bin/procs/tools.tcl
o
X-Press Update Files
-
rules/unarchiveCheck
-
rulesets/unarchivePolicy
-
signatures/rules/unarchiveCheck.sgn
-
signatures/rulesets/unarchivePolicy.sgn
-
lib/xpud3_56.zip
-
lib/xpud3_56.sgn
|
|
Sun Solaris
10 (SPARC)
|
o New
Checks
- xpu-integrity-summary
o New
Policies
- xpu-integrity-summary
o
Updated Files
- bin/procs/tools.tcl
-
bin/procs/ty_textdata.tcl
o
X-Press Update Files
-
rules/unarchiveCheck
-
rulesets/unarchivePolicy
-
signatures/rules/unarchiveCheck.sgn
-
signatures/rulesets/unarchivePolicy.sgn
-
lib/xpud3_56.zip
-
lib/xpud3_56.sgn |
|
Microsoft
Windows 2000 (x86) Professional
|
o New
Checks
- xpu-integrity
- xpu-integrity-summary
o New
Policies
- xpu-integrity
- xpu-integrity-summary
o New
Files
-
bin/procs/proc_packages.tcl
-
lib/tcl8.2/crc/cksum.tcl
-
lib/pkgIndex.tcl
o
Updated Files
-
bin/procs/tools.tcl
o
X-Press Update Files
-
rules/unarchiveCheck
-
rulesets/unarchivePolicy
-
signatures/rules/unarchiveCheck.sgn
-
signatures/rulesets/unarchivePolicy.sgn
-
lib/xpud3_56.zip
-
lib/xpud3_56.sgn
|
|
Microsoft
Windows 2000 (x86) Server
|
o New
Checks
-
xpu-integrity-summary
o New
Policies
- xpu-integrity-summary
o
Updated Files
- bin/procs/tools.tcl
-
bin/checker
o
X-Press Update Files
-
rules/unarchiveCheck
-
rulesets/unarchivePolicy
-
signatures/rules/unarchiveCheck.sgn
-
signatures/rulesets/unarchivePolicy.sgn
-
lib/xpud3_56.zip
-
lib/xpud3_56.sgn |
|
Microsoft
Windows 2003 (x86) Server
|
o New
Checks
- xpu-integrity-summary
o New
Policies
- xpu-integrity-summary
o
Updated Files
- bin/procs/tools.tcl
-
bin/checker
o
X-Press Update Files
-
rules/unarchiveCheck
-
rulesets/unarchivePolicy
-
signatures/rules/unarchiveCheck.sgn
-
signatures/rulesets/unarchivePolicy.sgn
-
lib/xpud3_56.zip
-
lib/xpud3_56.sgn
|
