Red Hat LINUX VIRTUAL SERVER 4.6 - ADMINISTRATION Manuel d'installation télécharger pdf (Page 84)

64 z/VM and Linux on IBM System z: The Virtualization Cookbook for Red Hat Enterprise Linux 6.0

...

==> q signal shutdown

System default shutdown signal timeout: 300 seconds

This output shows that your changes have taken effect.

4.9 Addressing z/VM security issues

This section briefly discusses the following security issues.

򐂰 z/VM security products

򐂰 High-level z/VM security

򐂰 Linux user ID privilege classes

򐂰 z/VM user ID and minidisk passwords

4.9.1 VM security products

You might want to use a z/VM security product such as IBM RACF® or CA VM:Secure. They

allow you to address more security issues such as password aging and the auditing of users’

access attempts.

4.9.2 High-level z/VM security

The paper z/VM Security and Integrity discusses the isolation and integrity of virtual servers

under z/VM. It is on the web at:

http://www.vm.ibm.com/library/zvmsecint.pdf

4.9.3 Linux user ID privilege classes

Another security issue is the privilege class that Linux user IDs are assigned. Running Linux

Guests with less than CP Class G Privilege, REDP-3870 addresses this issue.

4.9.4 z/VM user ID and minidisk passwords

All passwords in a vanilla z/VM system are the same as the user ID. This is a large security

hole. The

minimum you should do is to address this issue.

There are two types of passwords in the USER DIRECT file:

User IDs The password required to log on with

Minidisks Separate passwords for read access, write access, and multi-write access

Both types of passwords should be modified. This can be done using the CHPW610 XEDIT

macro described in the next section.

1 2 ... 79 80 81 82 83 84 85 86 87 88 89 ... 295 296

Pas de commentaire

Red Hat LINUX VIRTUAL SERVER 4.6 - ADMINISTRATION Manuel d'installation Page 84