Date: Fri, 14 May 1999 00:30:04 +0200 (CEST)
From: Rik van Riel <riel@nl.linux.org>
To: hayward@slothmud.org
Subject: Re: Secure Linux Distribution project

On Thu, 13 May 1999 hayward@slothmud.org wrote:

> I think the goal here is to create a distribution that takes
> security into account first, rather than functionality first.
> 
> This would be taking security into account over conveniance (and
> maybe functionality).

I'm happy to announce that my employer is paying me to
create such a distribution.  It will be designed with
security in the first place and server functionality as
a close second.

Since the distribution will be 'covered' by a company,
inclusion of 'strange-license' software _will_ be partly
possible. We've already got permission to include the
commercial version of tripwire with the distribution.
Other nice programs might be on the way as well.

Solar Designer is also helping with the distribution.
Currently we're still in the planning phase where we
haven't even chosen a package format and base distribution
to use as a starting point yet, but from next week on
I'll be working on the distro 2 or 3 days a week...

The business model will be completely service-based. You
can download the distribution or order a cheap CD if you
want, but then you'll have to get your security updates
yourself. The paying customers can buy a 'subscription'
to security updates and other system upgrades, and maybe
get some extra packages that can't be distributed for
free.

Having support from one (or two) companies also makes
sure there are enough resources like disk space and
bandwidth available. Help from outside is always welcome,
it might be nice to do this as a medium-sized project
where only the commercial partners will be confronted
with the (boring?) customers and the hobby folks can
just do whatever they want...

regards,

Rik -- Open Source: you deserve to be in control of your data.
+-------------------------------------------------------------------+
| Le Reseau netwerksystemen BV:               http://www.reseau.nl/ |
| Linux Memory Management site:   http://www.linux.eu.org/Linux-MM/ |
| Nederlandse Linux documentatie:          http://www.nl.linux.org/ |
+-------------------------------------------------------------------+