Download Oracle® Linux - Security Guide for Release 6

Table of Contents
Preface .............................................................................................................................................. v
1 Oracle Linux Security Overview ....................................................................................................... 1
1.1 Basic Security Considerations .............................................................................................. 1
1.1.1 Keep Software up to Date ......................................................................................... 1
1.1.2 Restrict Network Access to Critical Services ............................................................... 1
1.1.3 Follow the Principle of Least Privilege ........................................................................ 1
1.1.4 Monitor System Activity ............................................................................................. 2
1.1.5 Keep up to Date on the Latest Security Information ..................................................... 2
1.2 The Oracle Linux Security Model .......................................................................................... 2
1.3 Overview of Oracle Linux Security ........................................................................................ 2
1.4 Understanding the Oracle Linux Environment ........................................................................ 3
1.5 Recommended Deployment Configurations ........................................................................... 3
1.6 Component Security ............................................................................................................. 4
1.7 References .......................................................................................................................... 4
2 Secure Installation and Configuration ............................................................................................... 7
2.1 Pre-Installation Tasks ........................................................................................................... 7
2.2 Installing Oracle Linux .......................................................................................................... 7
2.2.1 Shadow Passwords and Hashing Algorithms .............................................................. 8
2.2.2 Strong Passwords ..................................................................................................... 8
2.2.3 Separate Disk Partitions ............................................................................................ 8
2.2.4 Encrypted Disk Partitions ........................................................................................... 8
2.2.5 Software Selection .................................................................................................... 9
2.2.6 Network Time Service ............................................................................................... 9
2.3 Post-Installation Tasks ......................................................................................................... 9
3 Implementing Oracle Linux Security ............................................................................................... 11
3.1 Configuring and Using Data Encryption ............................................................................... 11
3.2 Configuring a GRUB Password ........................................................................................... 12
3.3 Configuring and Using Certificate Management .................................................................... 13
3.3.1 About the openssl Command ................................................................................... 14
3.3.2 About the keytool Command .................................................................................... 16
3.4 Configuring and Using Authentication .................................................................................. 17
3.4.1 About Local Oracle Linux Authentication ................................................................... 18
3.4.2 About IPA ............................................................................................................... 18
3.4.3 About LDAP Authentication ...................................................................................... 19
3.4.4 About NIS Authentication ......................................................................................... 20
3.4.5 About Winbind Authentication .................................................................................. 20
3.4.6 About Kerberos Authentication ................................................................................. 21
3.5 Configuring and Using Pluggable Authentication Modules ..................................................... 22
3.6 Configuring and Using Access Control Lists ........................................................................ 24
3.7 Configuring and Using SELinux .......................................................................................... 24
3.7.1 About SELinux Administration .................................................................................. 26
3.7.2 About SELinux Modes ............................................................................................. 27
3.7.3 Setting SELinux Modes ........................................................................................... 27
3.7.4 About SELinux Policies ............................................................................................ 28
3.7.5 About SELinux Context ............................................................................................ 29
3.7.6 About SELinux Users .............................................................................................. 32
3.8 Configuring and Using Auditing ........................................................................................... 33
3.9 Configuring and Using System Logging ............................................................................... 34
3.10 Configuring and Using Process Accounting ........................................................................ 37
3.11 Configuring and Using Software Management .................................................................... 37
3.11.1 Configuring Update and Patch Management ........................................................... 39
iii