4. Secure Linux Distributions; Bastille Linux

Some distributions specialise in security issues (rather than, ease of installation, for example). If you are particularly concerned about security and cracking/hacking issues, these distributions are worth considering --- even if you don't install one, a review of their policies is educational.

Bastille Linux is of particular interest as it is a "secure" variant of RedHat Linux (the distribution supported by ISD at UMIST). Bastille consists of an automated set of security patches which are applied after a RedHat installation.

Bastille Linux
From the Bastille Linux web site: The Bastille Hardening System attempts to "harden" or "tighten" the Linux operating system. It currently supports Red Hat and Mandrake systems. We attempt to provide the most secure, yet usable, system possible.


EnGarde Secure Linux
EnGarde is a secure distribution of Linux that implements advanced security techniques. It can be used as a web, DNS, mail, database, e-commerce, and general Internet server.


Immunix OS
Immunix OS is a Linux distribution designed to be secure both now and in the future. The Immunix security tools (StackGuardT, SubDomainT, and CryptoMarkT) provide security bug tolerance so that even if security vulnerability is found in one of the programs supplied with Immunix, the vulnerability will probably not be exploitable by attackers. Immunix OS is based on Red Hat 6.2, but with all C source-available programs re-compiled with the StackGuard compiler. The result is a system that is fundamentally compatible with Red Hat Linux, but is secured against a majority of all Internet security attacks. It was developed as part of technology funded by DARPA --- U.S. Defense Advanced Research Projects Agency.


Trustix Secure Linux
Trustix Secure Linux is a project to make a hardened Linux distribution for servers. It features OpenSSL, OpenSSH, Apache w/SSL & PHP, Postfix, POP3 and IMAP with SSL support, ProFTP, and ftpd-BSD.


...previousup (conts)next...



About this document:

Produced from the SGML: /home/isd/public_html/_unix_security/_reml_grp/unix_security_survey.reml
On: 10/11/2004 at 9:49:32
Options: reml2 -i noindex -l long -o html -p multiple