Novell CLIENT FOR LINUX 2.0 SP1 - ADMINISTRATION, Руководство администратора

Страница: 39 / 89

Security Considerations
5
39
n
ov
do
cx (e
n)
11
Ju
ly 20
08
5
Security Considerations
This section contains the following topics:.
Š
Section 5.1, “Security Features,” on page 39
Š
Section 5.2, “Known Security Threats,” on page 40
Š
Section 5.3, “Security Characteristics,” on page 40
Š
Section 5.4, “New and Modified Files,” on page 41
Š
Section 5.5, “Other Security Considerations,” on page 44
5.1 Security Features
The following table contains a summary of the Novell
®
Client
TM
for Linux security features:
Table 5-1
Novell Client for Linux Security Features
Feature Yes/No Details
Users are authenticated Yes GUI and command line login utilities support
authentication of NCP
TM and LDAP
connections via user authentication into
eDirectory
TM . NCP protocol authentication is
supported via RSA and LDAP authentication
is supported via SSL and Simple Bind
protocol.
Servers, devices, and/or services are
authenticated Yes Connections to servers are authenticated via
user-supplied credentials. No device
authentication is supported directly by the
Client.
Access to information is controlled Yes The product’s Virtual File System (VFS)
component (located in Linux Kernel space) is
the gatekeeper for enforcement of access
controls to Novell file systems.
Roles are used to control access No No explicit use of roles is included in this
product. eDirectory alias objects can be
created, but this is not considered true role-
based access and is not specifically supported
or administered through this product.
Logging and/or security auditing is done No Security logging and auditing features are not
supplied by nor supported by this product.
Data on the wire is encrypted by default No No wire encryption is supplied by this product.
Data stored is encrypted No This product does not provide long-term
storage of data.