No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

CloudEC V600R019C00 Security Maintenance (Enterprise On-premises, Only Conference)

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
System Maintenance Security Principles

System Maintenance Security Principles

Minimum Principle

  • Install only required services and components.
  • Distinguish server functions and roles. Do not install unnecessary services or components.
  • Distinguish functions and roles of service's internal components. Do not install unnecessary components.

Minimum Accounts

  • Manage accounts strictly according to account policies.
  • Strictly control addition, modification, and deletion of accounts and groups in the system.
  • Delete all useless accounts and groups.

Minimum Rights

  • Assign minimum rights to system services, groups, and accounts.
  • Control right assignment strictly in the operating system.
  • Forbid account's access to unrequired resources.

Dedication

  • A host must run only one type of service.
  • Partitions where the operating system, applications, and data are located must be separated.

Audit

  • Operations on the host must be monitored by using logs or other feasible methods.
  • Successes and failures to access the system's important resources must be audited.
  • Successful access to key system resources must be audited.
  • Successes and failures to modify the access control policy must be audited.
Translation
Download
Updated: 2019-08-07

Document ID: EDOC1100059091

Views: 16858

Downloads: 9

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next