Security Guideline for DESY Notebooks centrally supported by DV Zeuthen with Scientific Linux Version 4

There are a lot of advantages to run a centrally supported Linux on your DESY notebook. The support is available for C400, D410, D600, X300 and X1.

You have to upgrade to the DV supported version (SL4). Please contact uco-zn@desy.de

• See also [http://www-zeuthen.desy.de/~schoene/unter_texte/texte/DZNB_DVSEM.pdf Stephan Wiesand's Talk] !

Before traveling and always when your notebook is attached to the network:

• login with your acoount with an empty password (possible only in front of the notebook). If this is not possible use the guest account the first time.
• Connect to the network by running the command
  • using cable based interface with: lan start using the wireless interface: wlan start
• Each time a network interface is started, an automated check for avalaible updates is performed in the background. There's nothing to be done but accepting the updates offered.
  • manually: nbctl sync
  • without DESY synchronization: nbctl yum

• if you notice suspicious files or activities please contact uco-zn@desy.de

Recommendations:

• Lock the screen with a special xlock-password for which you will be asked the first time
• Arrange for secure password-less access to the notebook with ssh key authentication

Please read the [file:///afs/ifh.de/project/linux/Notebook/SL4/RelNotes.html Release Notes]