Security

The security of a system covers a wide range of elements, from the security of system deployment and configuration, to the security of the system management, and the security of the software that is running on the system. This document will only discuss security features that are currently implemented in xCAT, not address the OS or any additional software packages that might be installed.

• Installing xCAT on a FIPS-enabled system
  • Installation behavior
  • ISC DHCP and BIND
  • Validation boundary
• SELinux
  • What the cluster gets
  • Why a stateless node runs with SELinux disabled
  • xCAT runs in two permissive domains
  • Setting the mode of a node
  • An existing cluster
  • Checking a node
• TLS configuration
  • Protocol policy
  • Administrator overrides
  • Validation
• Transmission Channel
  • The SSL Certificates in xCAT
• Commands Access Control
  • Granting Users xCAT Privileges
  • Extra Setup for Remote Commands
  • Set Up Login Node (Remote Client)
• Auditing
• Password Management
• Nodes Inter-Access in The Cluster
  • Restricting Node to Node SSH
  • Secure Zones
• Apache Hardening
  • Directory Indexing Disabled by Default
  • Local Customizations
  • Security Response Headers and Server Banner
  • Sensitive Directories
  • Database Backups
  • Network Binding
  • IP-Based Access Control