In Part I, “ and Common Criteria” we covered the Common Criteria EAL 4+ certified installation and setup that was sponsored by IBM for a select subset of hardware. This “certified” build is a great first-stop for customers wishing to build a secure and hardened base system, yet might not address all of the services and software specifics that many customers would be interested in.
This next part will present more of a “generalist” view and give general recommendations and guidance for SUSE Linux Enterprise Server system security. Some topics may seem repeated here (from the previous part) yet the context is very different. More detail will be provided in some sections and certainly some more general examples for a greater number of services.