4. Secure Linux Distributions;
Bastille Linux
Some distributions specialise in security issues (rather than, ease
of installation, for example). If you are particularly concerned about
security and cracking/hacking issues, these distributions are worth
considering --- even if you don't install one, a review of their policies is
educational.
Bastille Linux is of particular interest as it is a "secure" variant
of RedHat Linux (the distribution supported by ISD at UMIST).
Bastille consists of an automated set of security patches which are applied
after a RedHat installation.
- Bastille Linux
-
From the Bastille Linux web site:
The Bastille Hardening System attempts to "harden" or "tighten" the
Linux operating system. It currently supports Red Hat and Mandrake
systems. We attempt to provide the most secure, yet usable,
system possible.
- EnGarde Secure Linux
-
EnGarde is a secure distribution of Linux that implements advanced
security techniques. It can be used as a web, DNS, mail, database,
e-commerce, and general Internet server.
- Immunix OS
-
Immunix OS is a Linux distribution designed to be secure both now
and in the future. The Immunix security tools (StackGuardT, SubDomainT,
and CryptoMarkT) provide security bug tolerance so that even if security
vulnerability is found in one of the programs supplied with Immunix,
the vulnerability will probably not be exploitable by attackers.
Immunix OS is based on Red Hat 6.2, but with all C source-available
programs re-compiled with the StackGuard compiler. The result is a
system that is fundamentally compatible with Red Hat Linux, but is secured
against a majority of all Internet security attacks. It was developed
as part of technology funded by DARPA --- U.S. Defense Advanced Research
Projects Agency.
- Trustix Secure Linux
-
Trustix Secure Linux is a project to make a hardened Linux distribution
for servers. It features OpenSSL, OpenSSH, Apache w/SSL & PHP,
Postfix, POP3 and IMAP with SSL support, ProFTP, and ftpd-BSD.
About this document:
Produced from the SGML: /home/isd/public_html/_unix_security/_reml_grp/unix_security_survey.reml
On: 10/11/2004 at 9:49:32
Options: reml2 -i noindex -l long -o html -p multiple