178 HEIDENHAIN Technical Manual iTNC 530 HSCI
HEIDENHAIN recommends activating SElinux in the default configuration and
protecting the settings for SELinux by an individual password:
Activate the Security Police
Activate the options Allow software updates, Allow openVPN tunnel for
remote service
Deactivate the options Allow program execution from VFAT, Allow NC to
change HeROS config files
This way SElinux prevents unknown programs from being executed. From the
point of view of HEIDENHAIN, this ensures sufficient protection of the control
system and its software from e.g. viruses and malicious software.
Installing additional virus scanners on the control is not necessary or advisable
from the point of view of HEIDENHAIN because it may cause problems with
the execution of the actual NC software or NC programs.
NC updates from HEIDENHAIN or updates that are created with PLCdesign
have a signature for identification. Only updates with such a signature can be
executed by activating the Allow software updates option. After an update
the newly installed programs are relabeled automatically—these may then be
executed. If the option is not enabled this has the effect that the end user can
no longer run NC software updates without entering the SElinux password
(the option would have to be enabled again temporarily). The same applies to
automatic updates via USB sticks.
Menu item Function
Partitions to Relabel
Relabel the
system
partition „/“
Sets a new label only for the SYS partition
Relabel the NC
software
partitions
Sets a new label for the NC partitions SYS,
PLC and TNC
To Next Page
Loading...
