Novell OPEN ENTERPRISE SERVER 2 SP2 - ADMINISTRATION, Руководство по внедрению, Страница: 219 / 288

Security 219
n
ov
do
cx (e
n)
22
Ju
n
e 20
09
Š
Governmental export and import compliance: It has cryptographic interfaces that are
exportable from the U.S. and importable into other countries with government-imposed
constraints on the export, import, and use of products that contain embedded cryptographic
mechanisms.
Š
Secure and tamper-resistant architecture: The architecture uses digital signatures to implement
a self-verification process so that consuming services are assured that NICI has not been
modified or tampered with when it is initialized.
Never Delete the NICI Configuration Files
In the early days of NICI development, some NICI problems could be solved only by deleting the
NICI configuration files and starting over. The issues that required this were solved years ago, but as
is often the case, the practice persists, and some administrators attempt to use this as a remedy when
they encounter a NICI problem.
No one should ever delete the NICI configuration files unless they are directly told to do so by a
member of the NICI development team. And in that rare case, they should be sure to back up the
files before doing so. Failure to do this makes restoring NICI impossible.
More Information
For more information on how to use NICI, see the Novell International Cryptographic
Infrastructure (NICI) 2.7.5 Administration Guide .
21.1.4 General Security Issues
In addition to the information explained and referenced in this section, the OES online
documentation contains links to
“General Security Issues” (http://www.novell.com/documentation/
oes2/security.html#b1349evx) .
21.2 Planning for Security
This section discusses the following topics. For additional planning topics, see the Security section
in the OES online documentation .
Š
Section 21.2.1, “Comparing the Linux and the Novell Trustee File Security Models,” on
page 219
Š Section 21.2.2, “User Restrictions: Some OES 2 Limitations,” on page 221
21.2.1 Comparing the Linux and the Novell Trustee File
Security Models
The Novell Trustee and Linux (POSIX) security models are quite different, as presented in Table 21-
1 .