Linux's Security Capabilities

6.2 Distributions sécurisées

• nmrcOS <http://www.nmrc.org/nmrcOS/>: who's goal is to provide a secured and stable system
  • Based on a Slackware distribution with a 2.0.36 kernel, it includes several security patchs for the kernel: "Solar Designer's patch", "Trusted path support", "Probe Detection Patch"...
  • A script to harden acess rights to numerous sensible files.
  • Currently ported to Linux 2.2.12

• bastille-linux <http://bastille-linux.sourceforge.net/>: based on a RedHat distribution it's goal is "to "harden" or "tighten" the Linux operating system".
  • The project consists today in a script that tighten a system under Redhat 6.0 et 6.1: acess rights to sensible files and security parameters of applications.
  • The 1.1.0 version is available since june, 7 of 2000 and is extensible to other distributions.

• Stack-Guard <http://www.immunix.org/products.html.en#stackguard>: it's a patch to the gcc 2.7.2.3 compiler to generate auto-immune code to buffer overflows in the execution stack.
  • Has shown great efficiency on many occasions:
    • exploitation of security vulnerabilities are generally of this kind.
  • A version of RedHat 5.2 entirely recompiled with Stack-Guard is available.
  • Is a complementary approach to:
    • Using a non executable stack
    • Auditing source code
  • The 2.O version of Stack-Guard is a port to egcs 2.91.66 and an Immunix OS version 6.2 based on a Red Hat 6.2 is available.

• Nexus Linux <http://www.lemuria.org/Nexus/>: is a distribution indented for administrators who's first concern is security. It comes in standard with Openssh and ssl support for apache.
  • Still in early development stage: v0.4.4p1
  • Available on the following site: <ftp://ftp.lemuria.org/pub/Nexus/>
  • is in fact the old kha0s distribution <http://www.kha0s.org/>.

• slinux <http://www.slinux.org/>: is a distribution intended to be more complete than all the others, it should integrate privilige management, partition cipherening, ...
  • Actualy, development didn't start.
  • is in fact the old securelinux distribution <http://www.reseau.nl/securelinux/>

Linux's Security Capabilities

® © Hervé Schauer Consultants 2000 - 4 bis, rue de la gare - 92300 Levallois-Perret
Phone : +33 141 409 700 - Fax : +33 141 409 709 - Email : <secretariat@hsc.fr>