Plans for next generation linux desktop support.
Ubuntu 16.04 LTS, codename "Xenial Xerus"
Long term support (LTS) releases are for 5 years.
It is possible to upgrade (complete reinstall not required) from one LTS distro to the next (eg, 14.04 -> 16.04)
These are taken directly from the SLAC MinSec Policy (which has 11 items that match the 11 items below)
These will be configured using Chef Configuration Management and Compliance scanning/reporting
In order to align with Stanford Minimum Security Standards for Endpoints (defined as any laptop, desktop, or mobile device), there are some additional requirements, as documented on this link:
https://uit.stanford.edu/guide/securitystandards
ClamAV or chkrootkit can be used on on Ubuntu for malware protection.
Backups
Crash Plan (Stanford) on Ubuntu can be used
Information: https://uit.stanford.edu/service/code42crashplan
Download linux client pre-configured for Stanford Single Sign On: https://stanford.box.com/SU-SemiCustomized-CPPe-Install
Inventory
These will be configured using Chef Configuration Management and Compliance scanning/reporting
Published SLAC Policies and Governance SLAC Controlled Documents page:
https://docs.slac.stanford.edu/sites/pub/Pages/SLAC_Policies.aspx
Minimum Security Requirements for Computing
https://docs.slac.stanford.edu/sites/pub/Publications/701-I02-001-00_Min_Sec_Req_for_Comp.pdf
Stanford MinSec cookbooks:
https://uit.stanford.edu/guide/securitystandards/cookbooks
Configuration Management Procedures in the SCS twiki:
https://novel.slac.stanford.edu/twiki/bin/view/SCCS/ConfigurationManagement
SLAC Password Policy
http://www2.slac.stanford.edu/computing/security/password/passwordpolicy.htm
CIS Benchmarks
CIS_Ubuntu_Linux_16.04_LTS_Benchmark_v1.0.0.pdf
CIS_CentOS_Linux_7_Benchmark_v2.1.1.pdf
CIS_Red_Hat_Enterprise_Linux_7_Benchmark_v2.1.1.pdf
CIS_Red_Hat_Enterprise_Linux_6_Benchmark_v2.0.2.pdf
CIS_CentOS_Linux_6_Benchmark_v2.0.2.pdf
Related articles appear here based on the labels you select. Click to edit the macro and add or change labels.