Skip Navigation Links | |
Exit Print View | |
![]() |
Trusted Extensions Configuration Guide Oracle Solaris 10 8/11 Information Library |
1. Security Planning for Trusted Extensions
2. Configuration Roadmap for Trusted Extensions
3. Adding Trusted Extensions Software to the Oracle Solaris OS (Tasks)
4. Configuring Trusted Extensions (Tasks)
5. Configuring LDAP for Trusted Extensions (Tasks)
6. Configuring a Headless System With Trusted Extensions (Tasks)
Creating and Managing a Security Policy
Site Security Policy and Trusted Extensions
Computer Security Recommendations
Physical Security Recommendations
Personnel Security Recommendations
Additional Security References
General Computer Security Publications
B. Using CDE Actions to Install Zones in Trusted Extensions
Because no computer is completely secure, a computer facility is only as secure as the people who use it. Most actions that violate security are easily resolved by careful users or additional equipment. However, the following list gives examples of problems that can occur:
Users give passwords to other individuals who should not have access to the system.
Users write down passwords, and lose or leave the passwords in insecure locations.
Users set their passwords to easily guessed words or easily guessed names.
Users learn passwords by watching other users type a password.
Unauthorized users remove, replace, or physically tamper with hardware.
Users leave their systems unattended without locking the screen.
Users change the permissions on a file to allow other users to read the file.
Users change the labels on a file to allow other users to read the file.
Users discard sensitive hardcopy documents without shredding them, or users leave sensitive hardcopy documents in insecure locations.
Users leave access doors unlocked.
Users lose their keys.
Users do not lock up removable storage media.
Computer screens are visible through exterior windows.
Network cables are tapped.
Electronic eavesdropping captures signals emitted from computer equipment.
Power outages, surges, and spikes destroy data.
Earthquakes, floods, tornadoes, hurricanes, and lightning destroy data.
External electromagnetic radiation interference such as sun-spot activity scrambles files.