Security Considerations; Security Features - Novell CLIENT FOR LINUX 1.2 - ADMINISTRATION Manual

Security Considerations

6
This section contains the following topics:.
• Section 6.1, "Security Features," on page 37
• Section 6.2, "Known Security Threats," on page 38
• Section 6.3, "Security Characteristics," on page 38
• Section 6.4, "New and Modified Files," on page 39
• Section 6.5, "Other Security Considerations," on page 42

6.1 Security Features

The following table contains a summary of the Novell
Novell Client for Linux Security Features
Table 6-1
Feature
Users are authenticated
Servers, devices, and/or services are
authenticated
Access to information is controlled
Roles are used to control access
Logging and/or security auditing is done
Data on the wire is encrypted by default
Data stored is encrypted
®
Client for Linux security features:
TM
Yes/No Details
Yes GUI and command line login utilities support
authentication of NCP
connections via user authentication into
eDirectory TM
supported via RSA and LDAP authentication
is supported via SSL and Simple Bind
protocol.
Yes Connections to servers are authenticated via
user-supplied credentials. No device
authentication is supported directly by the
Client.
Yes The product's Virtual File System (VFS)
component (located in Linux Kernel space) is
the gatekeeper for enforcement of access
controls to Novell file systems.
No No explicit use of roles is included in this
product. eDirectory alias objects can be
created, but this is not considered true role-
based access and is not specifically supported
or administered through this product.
No Security logging and auditing features are not
supplied by nor supported by this product.
No No wire encryption is supplied by this product.
No This product does not provide long-term
storage of data.
TM and LDAP
. NCP protocol authentication is
Security Considerations
6
37