Oracle® VM Server for SPARC 3.2 Security Guide

oracle home

Oracle^® VM Server for SPARC 3.2 Security Guide

Exit Print View

» ...Documentation Home » Oracle VM Server for SPARC » Oracle^® VM Server for SPARC 3.2 ...

Updated: March 2015

Oracle^® VM Server for SPARC 3.2 Security Guide

Document Information

Using This Documentation

Product Documentation Library

Access to Oracle Support

Feedback

Chapter 1 Oracle VM Server for SPARC Security Overview

Security Features Used by Oracle VM Server for SPARC

Oracle VM Server for SPARC Product Overview

Applying General Security Principles to Oracle VM Server for SPARC

Security in a Virtualized Environment

Execution Environment

Securing the Execution Environment

Defending Against Attacks

Operational Environment

Threat: Unintentional Misconfiguration

Countermeasure: Creating Operational Guidelines

Threat: Errors in the Architecture of the Virtual Environment

Countermeasure: Carefully Assigning Guests to Hardware Platforms

Countermeasure: Planning an Oracle VM Server for SPARC Domain Migration

Countermeasure: Correctly Configuring Virtual Connections

Countermeasure: Using VLAN Tagging

Countermeasure: Using Virtual Security Appliances

Threat: Side Effects of Sharing Resources

Evaluation: Side Effects Through Shared Resources

Countermeasure: Carefully Assigning Hardware Resources

Countermeasure: Carefully Assigning Shared Resources

Summary: Side Effects Through Shared Resources

Execution Environment

Threat: Manipulation of the Execution Environment

Evaluation: Manipulation of the Execution Environment

Countermeasure: Securing Interactive Access Paths

Countermeasure: Minimizing the Oracle Solaris OS

Countermeasure: Hardening the Oracle Solaris OS

Countermeasure: Using Role Separation and Application Isolation

Countermeasure: Configuring a Dedicated Management Network

ILOM

Threat: Complete System Denial-of-Service

Evaluation: Complete System Denial-of-Service

Countermeasure: Securing the ILOM

Hypervisor

Threat: Breaking the Isolation

Evaluation: Breaking the Isolation

Countermeasure: Validating Firmware and Software Signatures

Countermeasure: Validating Kernel Modules

Control Domain

Threat: Control Domain Denial-of-Service

Evaluation: Control Domain Denial-of-Service

Countermeasure: Securing Console Access

Logical Domains Manager

Threat: Unauthorized Use of Configuration Utilities

Evaluation: Unauthorized Use of Configuration Utilities

Countermeasure: Applying the Two-Person Rule

Countermeasure: Using Rights for the Logical Domains Manager

Countermeasure: Hardening the Logical Domains Manager

Countermeasure: Auditing the Logical Domains Manager

Service Domain

Threat: Manipulation of a Service Domain

Evaluation: Manipulation of a Service Domain

Countermeasure: Granularly Segregating Service Domains

Countermeasure: Isolating Service Domains and Guest Domains

Countermeasure: Restricting Access to Virtual Consoles

I/O Domain

Threat: Experiencing a Denial-of-Service of an I/O Domain or a Service Domain

Evaluation: Experiencing a Denial-of-Service of an I/O Domain or a Service Domain

Countermeasure: Granularly Configuring I/O Domains

Countermeasure: Configuring Redundant Hardware and Root Domains

Threat: Manipulation of an I/O Domain

Evaluation: Manipulation in an I/O Domain

Countermeasure: Protecting Virtual Disks

Guest Domains

Countermeasure: Securing the Guest Domain OS

Chapter 2 Secure Installation and Configuration of Oracle VM Server for SPARC

Installation

Postinstallation Configuration

Chapter 3 Security Considerations for Developers

Oracle VM Server for SPARC XML Interface

Appendix A Secure Deployment Checklist

Oracle VM Server for SPARC Security Checklist

Language:

Oracle^® VM Server for SPARC 3.2 Security Guide

March 2015

Includes information about using the Oracle VM Server for SPARC 3.2 software in a secure manner.