Skip to Content.
Sympa Menu

unclug - [unclug] Sparse meeting notes [Was: unclug Digest, Vol 54, Issue 8]

unclug AT lists.ibiblio.org

Subject: UNC Linux Users Group

List archive

Chronological Thread  
  • From: Palmer, Cristóbal <cmpalmer AT email.unc.edu>
  • To: UNC Linux Users Group <unclug AT lists.ibiblio.org>
  • Subject: [unclug] Sparse meeting notes [Was: unclug Digest, Vol 54, Issue 8]
  • Date: Tue, 23 Apr 2013 02:57:44 +0000

On Apr 19, 2013, at 12:13 PM, "Glassman, Matthew S" <mglassmn AT email.unc.edu>
wrote:

> Could those in the meeting that took better notes than I. List out the
> Security Best Practices rules (11am meeting) and incorporate architecture
> and logging softwares mentioned?


I'm not speaking for ITS or ITS-Security here, so feel free to speak up if
I'm remembering things wrong or am otherwise off base. Also, this is by no
means comprehensive, but since I haven't seen another reply I'll send one.
This mailing list strips slides, but there was a brief slide show and I have
a copy, so ping me off-list if you want that.

This is from memory and not the slides:

= AV =

* AV is not required but is recommended as best practice, especially in
contexts where where Windows machines will have regular access to the host
(eg. a Samba server).
* Where people have an AV solution that meets their needs, no particular
policy or recommendation seeks to push them elsewhere
* For people looking for a solution, SCEP is available for Mac and Linux.
Contact ITS-Security.

= Logging =

(I believe the slides go into more detail here)

* Logging to a separate host is best practice and required in some contexts
* Set up auditd to track things that will be important in incident response
* Several logging tools were mentioned, including rsyslog (the default in
RHEL 6) and Splunk. Others can chime in with what they use.

= Systems Management =

* I brought up puppet. Large development community, puppetforge, ruby-based.
* Others mentioned Chef -- lighter weight and faster, C.
* Another tool was mentioned that's possibly from Dell -- I can't recall.

There was other general discussion that was good, but I also failed to take
detailed notes. Maybe somebody will do that next me, or possibly nudge me to
do so.

Cheers,
--
Cristóbal Palmer
Systems Administrator with Open Systems
University of North Carolina at Chapel Hill
440 W. Franklin St. Chapel Hill, NC 27599-1150





Archive powered by MHonArc 2.6.24.

Top of Page