瀏覽代碼

Updating Security Information

Signed-off-by: cgoveas <cassandra.goveas@dell.com>
cgoveas 3 年之前
父節點
當前提交
10cb52675e
共有 2 個文件被更改,包括 12 次插入0 次删除
  1. 6 0
      docs/Security/ENABLE_SECURITY_LOGIN_NODE.md
  2. 6 0
      docs/Security/ENABLE_SECURITY_MANAGEMENT_STATION.md

+ 6 - 0
docs/Security/ENABLE_SECURITY_LOGIN_NODE.md

@@ -55,6 +55,12 @@ To encourage security, users who have been idle over 3 minutes will be logged ou
 Optionally, different communication protocols can be disabled on the management station using the `restrict_program_support` and `restrict_softwares` variables in `omnia_security_vars.yml. These protocols include: telnet,lpd,bluetooth,rlogin and rexec. Features that cannot be disabled include: ftp,smbd,nmbd,automount and portmap. 
 
 
+## Configuring Email Alerts for Authentication Failures
+
+If the `alert_email_address` variable in `omnia_security_config.yml` is populated with a single, valid email ID, all authentication failures will trigger an email notification. A cron job is set up to verify failures and send emails every hour.
+
+>> __Note:__ The `alert_email_address` variable is __optional__. If it is not populated, authentication failure email alerts will be disabled.
+
 ## Kernel Lockdown
 
 * RockyOS has Kernel Lockdown mode (Integrity) enabled by default

+ 6 - 0
docs/Security/ENABLE_SECURITY_MANAGEMENT_STATION.md

@@ -69,6 +69,12 @@ To encourage security, users who have been idle over 3 minutes will be logged ou
 
 Optionally, different communication protocols can be disabled on the management station using the `restrict_program_support` and `restrict_softwares` variables. These protocols include: telnet,lpd,bluetooth,rlogin and rexec. Features that cannot be disabled include: ftp,smbd,nmbd,automount and portmap. 
 
+## Configuring Email Alerts for Authentication Failures
+
+If the `alert_email_address` variable in `security_config.yml` is populated with a single, valid email ID, all authentication failures will trigger an email notification. A cron job is set up to verify failures and send emails every hour.
+
+>> __Note:__ The `alert_email_address` variable is __optional__. If it is not populated, authentication failure email alerts will be disabled.
+
 ## Log Aggregation via Grafana
 
 [Loki](https://grafana.com/docs/loki/latest/fundamentals/overview/) is a datastore used to efficiently hold log data for security purposes. Using the `promtail` agent, logs are collated and streamed via a HTTP API.