When a system is connected to the Internet, handed over to customers, or otherwise placed in an uncontrolled environment, there is a risk that the server may get compromised. Linux servers are no exception to this. Proper security policies, internet firewalls, and packet filtering all act to minimize this risk and impact. When running Linux servers as z/VM guests, we also need to consider interactions between the Linux virtual machines and the z/VM host. As this type of interaction is not limited to network connectivity, firewalls are less effective in controlling it. The purpose of this paper is to provide guidance in hardening a z/VM system to run Linux virtual machines in a hostile environment.
Related white papers
Make the Move from UNIX to Linux: Now is the Time
UNIX generally requires expensive proprietary software and hardware as well as budget-draining annual maintenance costs. These expenses are a key factor in recent wide-spread migrations to other platforms, specifically Linux....
Deploying an Open Source HPC Environment on an IBM eServer BladeCenter JS20 Using SUSE LINUX Enterprise Server 8 and CSM
Cluster Systems Management (CSM) provides a distributed system management solution that allows a system administrator to set up and maintain a cluster of nodes that run the Linux operating system....
Introduction to HiperDispatch Management Mode with z10
HiperDispatch was introduced with IBM's z10 server, and is available (via PTFs) on z/OS V1R7, z/OS V1R8, and z/OS V1R9. HiperDispatch was designed to (1) minimize the z10 hardware performance...
Electronic Arts Runs the Sims Online Game Faster and More Reliably, Saves $3.4 Million With Oracle Real Application Clusters on Linux
Electronic Arts Inc. (EA) is the world's largest independent developer and publisher of interactive entertainment software for PCs, game boxes and the internet. EA needed to build a solid computing...
UK Police Authority Supports Investigations With Powerful Solution and Reduces Expenditure by 90 Per Cent
The Kent Police Authority is one of 43 police authorities in England and Wales established by Parliament for the governance of policing at a local level. The Kent Police had...
Migration Scenarios for SAP to Linux on IBM Power Systems
Migration of an SAP system is never an easy task. Crossing endian boundaries and interim OS images doesn't help an already difficult job. This paper describes different scenarios in which...
Move From Linux to Windows Server Improves Reliability for Building Materials Provider
Building materials provider Western Materials had a Linux-based solution for file, print, Virtual Private Network (VPN), and e-mail services that was unreliable, required constant support, and didn't integrate well with...



