Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 1: Introduction
The Type Enforced environment
The Type
Enforced
environment
4
As mentioned earlier in this chapter, Sidewinder G2 runs under SecureOS, a
version of BSD/OS that Secure Computing has enhanced with a patented
security technology called Type Enforcement. Type Enforcement was originally
developed by Secure Computing Corporation for the Secure Network Server, a
product which meets strict U.S. government standards for computer security.
For the most part, Type Enforcement does not require any extra effort on your
part. The following subsections describe areas that affect how you use the
system and access files of which you should be aware.
Sidewinder G2 kernels
The Sidewinder G2 contains two separate UNIX kernels that each serve a
specific purpose:
• Operational kernel
This is the kernel that is running during normal operation. By default, the
system boots to the Operational kernel. In this mode, the Sidewinder G2 is
connected to the Internet and to your internal networks, and all network services
are operational. Most importantly, the system is fully protected by the
Type Enforcement security software.
For information on booting to the Operational kernel, refer to “Restarting or
shutting down the system” on page 40.
• Administrative kernel
This kernel is used only when an administrator needs to perform special
tasks on the Sidewinder G2, such as installing or restoring Sidewinder G2
software. When the Administrative kernel is running, all network connections
are disabled and Internet services are not available; the Type Enforcement
security software is also disabled. Access to the Administrative kernel
is tightly controlled and cannot be granted remotely.
Important: When you boot to the Administrative kernel, the system can be
accessed only by attaching a monitor and keyboard (or a laptop) directly to your
Sidewinder G2. For information on booting to the Administrative kernel, refer to
“Powering up the system to the Administrative kernel” on page 636.