You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 2 Next »

Plans for next generation linux desktop support.

Security Services/Features needed (based on SLAC MinSec):

  1. Anti-virus Software
    1. Install and configure ClamAV (optional, since not in moderate enclave)
  2. Application Patches
    1. Configure automatic updates for Applications via apt/yum config
  3. Authentication
    1. Requirements met for global accounts via Active Directory rules
    2. Use Chef Compliance to scan for and enabled insecure protocols
  4. Logging
    1. Configure syslog to log to central syslog server, and enable logging locally to /var/log/everything
  5. Network Services
    1. Check for inappropriate network services via Chef Compliance
  6. Operating System Patches
    1. Configure automatic updates for OS patches via apt/yum 
  7. Passwords

Reference Documents:

  • No labels