Operating system security–the topic can evoke strong adjectives. At Red Hat, with regard to security, we are striving to be:
- Innovative: Red Hat leads the way in developing new security technology for Linux. As a result, Red Hat is making secure operating system architectures an affordable, mainstream solution.
- Transparent: The strength of open source development has made Red Hat Enterprise Linux into a highly secure operating system that lowers the cost of security maintenance.
- Vigilant: Red Hat continually looks for potential security exposures and delivers tested security updates through Red Hat Network.
- Inclusive: Red Hat works closely with partners to make sure customers have a choice in building a secure, integrated environment. (For example, Red Hat and IBM are working together to enable organizations to realize the combined security benefits of Red Hat Enterprise Linux with SE Linux running on IBM System z.)
This approach has resulted in Red Hat Enterprise Linux 5. This version contains some of the most dynamic security enhancements yet. The top five are:
- Native Trusted Operating System support: One of the most exciting aspects of Red Hat Enterprise Linux 5 is that it is shipping with with native support for functionality necessary to meet Common Criteria for Trusted Operating Systems. [This includes all functionality to enable EAL 4+ certification under the following protection profiles: CAPP (Controlled Access Protection Profile), RBAC (Role Based Access Control) and LSPP (Labeled Security Protection Profile).]
In the past, government organizations needing these levels of security were dependent on expensive proprietary operating systems that were branched from the main trunk and often a full version behind. Those days are finally gone. Red Hat is working with partners–particularly IBM–to gain full certification on specific hardware including Systems x, p and z. - SE Linux Ease of Use: SE Linux was introduced in Red Hat Enterprise Linux 4 and while the functionality was (and is) powerful and unique, it was not that easy to work with. Red Hat Enterprise Linux 5 is a big step forward.
SE Linux enables granular policy-based control over programs’ access to data and the kernel resources. This prevents a compromised program from acting outside its policy. SE Linux was developed in coordination with the open source community and the NSA to provide the highest levels of security to the Linux operating system.
With Red Hat Enterprise Linux 5, 200+ core system services are protected by default via targeted policies enabling organizations to more quickly benefit from the security provided by SE Linux. Red Hat Enterprise Linux 5 also includes enhanced SE Linux management tools. This simplifies the process of creating, customizing, managing and troubleshooting SE Linux policy. - Smart Card Integration: Two-factor authentication for Red Hat Enterprise Linux. Insert your smart card, enter the PIN and you’re in. You get in via PAM–the system leverages the smart card authentication to generate a Kerberos ticket. Then you can single-sign on to Kerberos aware applications such as SSH, SCP and Fedora Directory Server. As well, Firefox and Thunderbird are now able to leverage the end user’s certificate to perform SSL client authentication to a web server that supports this. Of course, Red Hat’s own Certificate System can be used to create and manage the end user’s certificate.
- Even More Attack Protection: Red Hat Enterprise Linux 5 includes four additional innovations to further strengthen the system against attack.
Fortify Source: Now run on all selected packages. When the compiler knows the size of a buffer, functions operate on the buffer to make sure it will not overflow at runtime. This works to help catch format string flaws as well as buffer overflows.
Stack Smashing protection (Canary values): The system will place a canary value at a randomized point above the stack. This canary value is verified during normal operation. If the stack has been smashed, the canary value will have been overwritten, indicating that the stack has been smashed. This is a method to detect buffer overflows early.
Pointer encryption: Function pointers are encrypted with unique random values. This is intended to detect an overwrite of a pointer in memory and prevent the subsequent redirect of execution.
SE Linux Memory Protection: This enhancement can prevent any memory that was writable from becoming executable. This prevents an attacker from writing his code into memory and then executing it. - Auditing. A complete, configurable local audit subsystem is included with Red Hat Enterprise Linux 5, giving organizations the ability to centrally track (on a local system) events from logins to low-level system events. The audit subsystem includes the ability to audit users, processes and files as well as search and reporting utilities to quickly see what security events have been occurring on the system. Sample CAPP/LSPP rule sets are included.
These features provide organizations with unparalleled protection against hackers, malware and insider abuse. The system is further protected against malicious attacks. Even if an attacker can get control of an application, the application can be constrained from acting outside its proper parameters, greatly limiting the effect of the attack. Detailed auditing provides insight into security events on the system. Access to the system can require stronger authentication using smart cards reducing dependency on more easily compromised smart cards.
Together these innovations combined with Red Hat’s whole approach to security make Red Hat Enterprise Linux 5 a great choice for organizations looking to use more positive adjectives when they describe their operating system security experience.
For more information on the the security features of Red Hat Enterprise Linux 5 and on Red Hat’s innovative, transparent, vigilant and inclusive approach to security, look for the whitepaper soon.
저자 소개
채널별 검색
오토메이션
기술, 팀, 인프라를 위한 IT 자동화 최신 동향
인공지능
고객이 어디서나 AI 워크로드를 실행할 수 있도록 지원하는 플랫폼 업데이트
오픈 하이브리드 클라우드
하이브리드 클라우드로 더욱 유연한 미래를 구축하는 방법을 알아보세요
보안
환경과 기술 전반에 걸쳐 리스크를 감소하는 방법에 대한 최신 정보
엣지 컴퓨팅
엣지에서의 운영을 단순화하는 플랫폼 업데이트
인프라
세계적으로 인정받은 기업용 Linux 플랫폼에 대한 최신 정보
애플리케이션
복잡한 애플리케이션에 대한 솔루션 더 보기
오리지널 쇼
엔터프라이즈 기술 분야의 제작자와 리더가 전하는 흥미로운 스토리
제품
- Red Hat Enterprise Linux
- Red Hat OpenShift Enterprise
- Red Hat Ansible Automation Platform
- 클라우드 서비스
- 모든 제품 보기
툴
체험, 구매 & 영업
커뮤니케이션
Red Hat 소개
Red Hat은 Linux, 클라우드, 컨테이너, 쿠버네티스 등을 포함한 글로벌 엔터프라이즈 오픈소스 솔루션 공급업체입니다. Red Hat은 코어 데이터센터에서 네트워크 엣지에 이르기까지 다양한 플랫폼과 환경에서 기업의 업무 편의성을 높여 주는 강화된 기능의 솔루션을 제공합니다.