Novell OPEN ENTERPRISE SERVER 2 SP2 - ADMINISTRATION, Implementation Manual, Page: 217 / 288

Security
21
217
n
ov
do
cx (e
n)
22
Ju
n
e 20
09
21
Security
This section contains the following topics:
Š
Section 21.1, “Overview of OES Security Services,” on page 217
Š
Section 21.2, “Planning for Security,” on page 219
Š
Section 21.3, “Configuring and Administering Security,” on page 222
Š
Section 21.4, “Links to Product Security Considerations,” on page 222
Š
Section 21.5, “Links to Anti-Virus Partners,” on page 223
21.1 Overview of OES Security Services
This section provides specific overview information for the following key OES components:
Š
Section 21.1.1, “Application Security (AppArmor),” on page 217
Š
Section 21.1.2, “Auditing,” on page 217
Š
Section 21.1.3, “Encryption (NICI),” on page 218
Š
Section 21.1.4, “General Security Issues,” on page 219
For more authentication and security topics, see the OES online documentation .
21.1.1 Application Security (AppArmor)
Novell
®
AppArmor
®
provides easy-to-use application security for both servers and workstations.
You specify which files a program can read, write, and execute.
AppArmor enforces good application behavior without relying on attack signatures and prevents
attacks even if they are exploiting previously unknown vulnerabilities.
For more information, see the Novell AppArmor Documentation Web site (http://www.novell.com/
documentation/apparmor/index.html) .
21.1.2 Auditing
Š
“NSS Auditing Engine” on page 217
Š “Nsure Audit Starter Pack” on page 218
NSS Auditing Engine
OES 2 SP2 includes the NSS Auditing Engine, which is installed by default with NSS.
The auditing engine provides an interface for auditing client applications, such as Novell Sentinel
and various third-party products to access. Information about the auditing engine SDK is available
on the
Novell Web site (http://developer.novell.com/wiki/index.php/NSS_Auditing_SDK) .