The moose likes Linux / UNIX and the fly likes secure linux ? Big Moose Saloon
  Search | Java FAQ | Recent Topics
Register / Login


Win a copy of Practical Unit Testing with TestNG and Mockito this week in the Testing forum!
JavaRanch » Java Forums » Engineering » Linux / UNIX
Reply Bookmark "secure linux ?" Watch "secure linux ?" New topic
Author

secure linux ?

George Brown
Ranch Hand

Joined: Sep 26, 2000
Posts: 919
Can anyone recommend a distribution (preferably minimal) to use as a secure linux installation? There is a wide variety available but I'm looking for personal recommendations.
My requirements are primarily as a firewall but also to include webserver, ftp, etc capabilities.
All opinions/responses are much appreciated.
Tim Holloway
Saloon Keeper

Joined: Jun 25, 2001
Posts: 12510

The most secure Linux is the one with the fewest installed apps - and the most up-to-date security patches.
Beyond that, there are two options I know of: standard linux and linux built with a security-hardened kernel (I forget the name of the project, but it keeps even root from doing a lot of stuff).
As to specific distrubutions, I have no experience.


One of the most odious afflictions that Business has inflicted on the modern English language is "pro-active". Most of the time it's simply redundantly used in place of the simple old word "active". And a good deal of the rest of the time it means "You're not overworked enough yet, so go out and find more!"
Guy Allard
Ranch Hand

Joined: Nov 24, 2000
Posts: 776
Hi - the word 'security' can mean a lot of things ..... but my $.02 are:
It is not distro dependent.
Get a cutting (not bleeding) edge 2.4 kernel. Build it with appropriate options.
Uninstall ipchains if present, and get current maintenance for iptables.
Hand craft a firewall using iptables - lots of examples at linuxguruz.org.

HTH, Guy
 
IntelliJ Java IDE
 
subject: secure linux ?
 
Threads others viewed
donation to javaranch
JBoss as a prod. server.
Are Channels secure?
Is it possible to access a system from one network to another network(VPN)
connection to linux machine through 'ssh'
MyEclipse, The Clear Choice