Veritas NetBackup™ Virtual Appliance Documentation

The following list contains some of the IPS policy features:

• Real-time tight confinement of the appliance operating system processes and common applications, such as the following:

  • nscd - which caches DNS requests to cut down on remote DNS lookups.

  • cron

  • syslog-ng

  • klogd

  • rpcd for NFS

    • rpc.idmapd

    • rpc.mountd

    • rpc.statd

    • rpcbind

• Self-Protection for the SDCS agent itself to ensure that the security features and monitoring features of SDCS are not compromised.

• Lock-down of access to system binaries, except by identified and trusted applications, users, and user groups.

• Confinements that protect the system from the applications that try to install software, such as sbin) or change system configuration settings, such as hosts file.

• Prohibits applications from executing critical system calls such as mknod, modctl, link, mount, and so on.

• Prohibits unauthorized users or applications from accessing backup data, such as /advanceddisk, /cat, /disk, /opt/NBUAppliance/db/config/data, and so on.

• Restricted access to the root account by maintenance user.