The security policy of Linux
A security policy is a definition that outlines the rules and practices to be followed to set up the computer network security in an organization. How the organization should manage, protect, and distribute sensitive data is also defined by the security policy.
Developing a security policy
When creating a security policy, we should keep in mind that it should be simple and easy for all users. The objective of the policy should be to protect data while keeping the privacy of users intact.
It should be developed around these points:
- Accessibility to the system
- Software installation rights on the system
- Data permission
- Recovery from failure
When developing a security policy, a user should use only those services for which permission has been granted. Anything that is not permitted should be restricted in the policy.
