Linux security hardening, Figure 101 "critical set – Nortel Networks NN43001-315 User Manual

Page 104

Advertising
background image

104

CS 1000 on Linux base

Figure 101
Critical Set alarm example

Figure 102
Critical Clear alarm example

Hardware watchdog

The IBM x306m and HP DL320 G4 servers offer a hardware watchdog.
The watchdog timer is programmed during the server startup and requires
continuous resets from a daemon running in Linux. The watchdog timer is
based on the current ISP1100 server, which is 5 minutes.

The server is reset if the watchdog timer is not reset within the allotted
time. The operating system and applications are reloaded from disk and
started after the server reset occurs. The following conditions can trigger
the watchdog:

The software daemon, which notifies hardware watchdog, fails to
respond.

A hardware or software problem causes the system to freeze.

Linux Security Hardening

The following features enhance Linux base security.

Virus protection

If antivirus software is installed by the customer the following is
recommended:

Antivirus software that uses 100 megabytes (MB) or less of hard drive
space.

Choose software that uses 84 MB or less of RAM.

Always set the process priority to low.

Perform virus scans during off-hours only.

Nortel Communication Server 1000

Linux Platform Base and Applications Installation and Commissioning

NN43001-315

02.09

29 October 2008

Copyright © 2007–2008 Nortel Networks

.

Advertising