From: Deepak Kumar Gupta <dkumar@noida.hcltech.com> To: securedistros@nl.linux.org Subject: The secure distribution listing Date: Thu, 29 Nov 2001 20:40:01 +0530 Hello Every Body I am giving the list of available secure distributions. The list can be a useful information for discussing the security issues in these distributions. 1.Trustix Linux: This is a secure server distribution prepared by Trustix AS, which doesn't have X-interface for security and performance reasons. It has also tried to maintain security defaults. More information is available at following link: http://www.trustix.net/ 2.EnGarde Linux: EnGarde Linux is a secure Linux distribution prepared by Guardian Digital, which is designed from the ground up as a secure solution, starting with the principle of least privilege, and carrying it through every aspect of its implementation. This distribution contains kernel patch (for LIDS) and number of tools and utilities for security of host and network systems. The more information is available at following link: -http://www.engardelinux.org/security.html 3.Kaladix hyper secure Linux: The aim of Kaladix Linux is to become an ultra-secure Linux distribution that satisfied all needs of Linux for secure server environment. They are aiming to get B1 security level. More information is available at following link: -http://www.kaladix.org/index.html 4.Immunix Linux: Immunix System is an Immunix-enabled RedHat Linux distribution and suite of application-level security tools. Immunix comes with the FormatGuard (a solution for format bugs which are affecting all the operating system) and includes a SubDomain-enabled kernel (a kernel extension designed to provide least privilege confinement to suspect programs). More information is available at following link: -http://www.immunix.org/ 5.Bastile Linux: Not really a distribution, but a post-install hardening script. The Bastille Hardening System attempts to "harden" or "tighten" the Linux operating system. It currently supports Red Hat and Mandrake systems. More information is available at following link: -http://www.bastille-linux.org/ Selected. 6.Titanium Linux: Titanium-Linux is a Secure Linux Distribution based on the Debian distribution and packaging system. As per the information from its maintainer the distribution is no longer running. More information is available at following link: -http://titaniumlinux.com/ 7.Linux Secure Server Distribution (LSSD): LSSD is an attempt to create a unix distribution, which can be used as a known safe platform on which host and network based applications can run. LSSD founded on the observation that most security approaches are based on the subtractive principle. The distribution was developed with the aim of providing only those utilities and facilities that allow correct booting, administration and maintenance. The more information is available at following link: -http://quatermass.co.uk/pub/lssd/ 8.Gibraltar: Gibraltar is a project that aims to produce a Debian GNU/Linux-based router and firewall package. Gibraltar is designed to work completely off the CD-ROM, with configuration data stored on a floppy disk. This is quite different from the common approach, where everything (program and configuration files) is stored on a hard disk. The more information is available at following link: -http://www.vianova.at/products/gibraltar/gibraltar.php?home 9.SmoothWall: SmoothWall is a specialized version of the Linux operating system that has been designed to provide a network with the functionality of a secure router and firewall. SmoothWall turns a PC (typically an older system that has since become outdated and unable to cope with the demands of today's modern software) into a dedicated firewall that will protect a private network of computers from the dangers that are posed by connecting it to the Internet. The more information is available at following link: -http://www.smoothwall.org/gpl/about/ 10.Astaro: Astaro security Linux is a firewall, which has features including stateful packet inspection, portscan detection, anti spoofing. It is not a complete open source solution; More information is available at following link: -http://www.astaro.com/products/index.htmlhttp://www.astaro.org/cgi/ultimate bb.cgi Can we discuss the security related features/issues of these distributions in the list ? Regards Deepak. -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/