Computing Policy Guidelines

The Basics

Read the Fermilab Policy on Computing.

• ALL USERS are expected to have read and understood the first two pages of the policy document.

• All system administrators are expected to have read and understood the full document.

Also be aware of the following:

• Computer Security Policies and Procedures
• List of actions which constitute blatant disregard for Laboratory computer security.

• Reporting suspected computer security incidents at Fermilab.
• Computer Security Awareness Checklist
• Statement on OS Versions and Patching from Sept 2005

Key Information for New Users

• Review all of the FNAL Policies and Procedures
• All network devices must be registered to get an address.
• Guidelines for Incidental use of Computers at Fermilab
• FNAL network protections include automatic and static blocks
• Suspected computer security incidents must be reported to FCIRT (x2345)
• The FNAL network is scanned regularly for machines offering services
• All network login services on machines at FNAL must utilize approved FNAL Strong Authentication methods
• Many OSes come with Kerberos aware clients now. The krb5.conf file needs info for FNAL. Set KRB5_CONFIG to override system default.
• Orientation Pages for New Users
• Checklist for connecting a computer to the FNAL network

Guidelines for Users

Mail attachments may contain viruses, worms or trojan horses. Here's what you should know.

• If you are the primary maintainer of your machine, you should sign up for the sysadmin information.
• Thwarting Social Engineering
• You are expected to run a virus scanner on your Windows machine. AVG is reportedly free for personal use. Most Divisions/Sections at the lab use either Symantec or Norton and have infrastructure in place.
• About Certificates and How to get a personal certificate
• Use Globus tools to run grid jobs
• Write restricted-use web pages
• More computer security guidelines for users
• Fermilab Grid Access Control Policy

Guidelines for System Administrators

• Guideline #1: Turn off all unnecessary services!
• Major Applications Guidance
• LDAP authentication for non-Strong Auth services
• Frequent attacks at FNAL
• Critical Vulnerabilities declared at FNAL.
  Mitigations are MANDATORY for network access.
• System Administrators' Round Table meetings.
• Baseline operating system configurations
• Certificate information (sysadmins, grid resource admins)
• More guidelines for system administrators.
• DOE Site Assist Visit (SAV): FNAL Observations, Policy (PPT) and Technical (PPT) (Nov-Dec 2005)

Guidelines for Webmasters

• Webservers require diligence in maintenance.
• Consult Offsite Access to Fermilab Webservers for information about how to enable webserver for offsite access.   
• Certificate information (advanced topics)
• Security information for webmasters
• DOE Site Assist Visit (SAV): FNAL Observations, Policy (PPT) and Technical (PPT) (Nov-Dec 2005)

Guidelines for Gridmasters

• Certificate information (advanced topics)
• Fermilab Grid Access Control Policy
• FermiGrid Sysadmin Guide
• Open Science Grid Compute Element Install Guide
• DOE Site Assist Visit (SAV): FNAL Observations, Policy (PPT) and Technical (PPT) (Nov-Dec 2005)