8
Securing Your Setup
A SUSE® Linux Enterprise Point of Service setup includes various components that
should be secured against intentional and unintentional tampering with the data and
against software misbehavior. Securing your setup involves several different aspects:
Physical Server Security
First and foremost, every server component of the SUSE Linux Enterprise Point
of Service setup must be secured against unauthorized access. Physically isolating
the servers from other machines is just one aspect of providing physical security.
For details, refer to Section 8.1, “Physical Server Security” (page 112).
Network Security
All servers connected with each other over potentially insecure networks, take the
Administration Server and the Branch Servers for example, need to be secured
against unauthorized access via the networks they are connected to. For details,
refer to Section 8.2, “Network Security” (page 112).
Data Security
Both the Administration Server and the Branch Server contain vital data that needs
to be protected to maintain a fully functional and secure setup. The most important
part in this is securing the LDAP directory on the Administration Server that is
used to maintain the system structure, configuration and deployment method for
all Branch Servers and Point of Service terminals, and other important data. For
details on how to achieve this, refer to Section 8.3, “Data Security” (page 113).
Application Security
Once physical, network and data security are provided, tighten the security of your
setup even further by using AppArmor. AppArmor profiles are used to confine
Securing Your Setup
111
