UNC Linux Users Group

["Hill, Jennifer Caitlyn" <caitlyn_hill AT unc.edu>]

Dell remote tool is called KBox - (you'll also hear it called KACE, since 
that's the software suite that runs all the dell sys management tools.)

-----Original Message-----
From: unclug-bounces AT lists.ibiblio.org 
[mailto:unclug-bounces AT lists.ibiblio.org] On Behalf Of Palmer, Cristóbal
Sent: Monday, April 22, 2013 10:58 PM
To: UNC Linux Users Group
Subject: [unclug] Sparse meeting notes [Was: unclug Digest, Vol 54, Issue 8]

On Apr 19, 2013, at 12:13 PM, "Glassman, Matthew S" <mglassmn AT email.unc.edu> 
wrote:

> Could those in the meeting that took better notes than I. List out the 
> Security Best Practices rules (11am meeting) and incorporate architecture 
> and logging softwares mentioned?


I'm not speaking for ITS or ITS-Security here, so feel free to speak up if 
I'm remembering things wrong or am otherwise off base. Also, this is by no 
means comprehensive, but since I haven't seen another reply I'll send one. 
This mailing list strips slides, but there was a brief slide show and I have 
a copy, so ping me off-list if you want that.

This is from memory and not the slides:

= AV =

* AV is not required but is recommended as best practice, especially in 
contexts where where Windows machines will have regular access to the host 
(eg. a Samba server).
* Where people have an AV solution that meets their needs, no particular 
policy or recommendation seeks to push them elsewhere
* For people looking for a solution, SCEP is available for Mac and Linux. 
Contact ITS-Security.

= Logging =

(I believe the slides go into more detail here)

* Logging to a separate host is best practice and required in some contexts
* Set up auditd to track things that will be important in incident response
* Several logging tools were mentioned, including rsyslog (the default in 
RHEL 6) and Splunk. Others can chime in with what they use.

= Systems Management =

* I brought up puppet. Large development community, puppetforge, ruby-based.
* Others mentioned Chef -- lighter weight and faster, C.
* Another tool was mentioned that's possibly from Dell -- I can't recall.

There was other general discussion that was good, but I also failed to take 
detailed notes. Maybe somebody will do that next me, or possibly nudge me to 
do so.

Cheers,
--
Cristóbal Palmer
Systems Administrator with Open Systems
University of North Carolina at Chapel Hill
440 W. Franklin St. Chapel Hill, NC 27599-1150

_______________________________________________
unclug mailing list
unclug AT lists.ibiblio.org
We are dedicated to a harassment-free linux education and sharing experience 
for everyone. Our anti-harassment policy can be found at: 
http://lists.ibiblio.org/mailman/listinfo/unclug