CIS Benchmark for Xen 3.2 v0.3

Center for Internet Security Benchmark for
Xen 3.2



Version 1.0
May, 2008






Copyright 2001-2008, The Center for Internet Security (CIS)
http://cisecurity.org


Editor: Adam Cecchetti
Leviathan Security Group

cis-feedback@cisecurity.org






CIS Xen 3.2 Benchmark
Table of Contents

Table of Contents .......................................................................................................................... 2
Introduction ................................... 7
Explanation of This Document ... 7
Intended Audience ...................... 7
Security Levels............................................................................................................................ 7
Precursor Technical Information ................................ 7
1. General Virtualization Guidance ........................ 9
1.1. Host Domain System Configuration ................................................................................ 9
1.2. Xen Security Modules ...................................... 9
1.3. Virtualized vs. Non Virtualized Hosts ........... 10
2. Benchmark Summary Checklist ........................................................ 11
3. General Configuration........................................................................ 15
3.1. Disable Debugging Xen ................................. 15
3.2. Enable XSM, Flask, and ACM ...................... 15
3.3. Use Absolute Path for Xend Log ...