LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 08-05-2009, 07:06 AM   #1
sabir_mustafa
Member
 
Registered: Aug 2009
Location: Rawalpindi
Distribution: RHEL 5, CentOS
Posts: 38

Rep: Reputation: 16
Post Best Linux distribution


Dear all:
I want to excel in Linux based security systems. In the market I see many distributions of Linux as well as on the web. I want to find out exactly which distribution is best or developed while keeping security in mind.
[Security] means I want to choose the specific Linux flavour which provides best built-in security tools and also support development environment for such tools.
 
Old 08-05-2009, 07:47 AM   #2
mek
Member
 
Registered: Jul 2009
Location: Buenos Aires, Argentina
Distribution: fedora, slackware, *bsd
Posts: 42

Rep: Reputation: 17
In my point of view, gentoo is one of the most secure distributions, because you should build the all distribution from scratch choosing what component and flavours do you want for all packages, in that way you can build a very minimal/secure distribution with just the things that you need, using the USE variable of the make.conf. In general the distributions are compiled with a lot of options that maybe you don't really need, but in gentoo you can choose exactly what you need in order to reduce the things that can be exploited later.

http://www.gentoo.org/dyn/use-index.xml

as well as:

http://www.gentoo.org/doc/en/security/
 
Old 08-05-2009, 08:49 AM   #3
teek
Member
 
Registered: Jun 2004
Location: The Netherlands; Dordrecht
Distribution: Arch (at the moment)
Posts: 110

Rep: Reputation: 16
Red hat/fedora are security enhanced linux' what that means you can find here:
http://docs.fedoraproject.org/selinu...ide/f10/en-US/
 
Old 08-05-2009, 08:55 AM   #4
rkirk
LQ Newbie
 
Registered: Apr 2009
Posts: 26

Rep: Reputation: 23
EnGarde is a Linux distribution that is built specifically to provide a very secure server environment, but if security is of the utmost importance, any distribution of Linux is typically better than Microsoft Windows, but it is not the best.

OpenBSD is the most secure operating system in the world, with a catch: it's not Linux. But the tools of the BSDs are often very similar to their Linux counterparts and most people who've got a fair amount of Linux experience should be able to learn about the BSDs and gain familiarity with them without too many problems.
 
Old 08-05-2009, 03:03 PM   #5
slimm609
Member
 
Registered: May 2007
Location: Chas, SC
Distribution: slackware, gentoo, fedora, LFS, sidewinder G2, solaris, FreeBSD, RHEL, SUSE, Backtrack
Posts: 430

Rep: Reputation: 67
Quote:
Originally Posted by rkirk View Post
EnGarde is a Linux distribution that is built specifically to provide a very secure server environment, but if security is of the utmost importance, any distribution of Linux is typically better than Microsoft Windows, but it is not the best.

OpenBSD is the most secure operating system in the world, with a catch: it's not Linux. But the tools of the BSDs are often very similar to their Linux counterparts and most people who've got a fair amount of Linux experience should be able to learn about the BSDs and gain familiarity with them without too many problems.
There really is no "Most secure operating system in the world" each one has its strengths and weaknesses you just need to find what best fits your needs. security and useability don't normally go hand-and-hand so you have to figure out what best meets your objective.

There are to many flavors out there to say X is best or Y is best
 
Old 08-05-2009, 03:08 PM   #6
linus72
LQ Guru
 
Registered: Jan 2009
Location: Gordonsville-AKA Mayberry-Virginia
Distribution: Slack14.2/Many
Posts: 5,573

Rep: Reputation: 470Reputation: 470Reputation: 470Reputation: 470Reputation: 470
Just remaster debian, ubuntu or any other, add what you want
and you got "sabir_mustafa_ubuntu", etc

you can use remastersys and others to do it for you too
 
Old 08-05-2009, 03:38 PM   #7
DotHQ
Member
 
Registered: Mar 2006
Location: Ohio, USA
Distribution: Red Hat, Fedora, Knoppix,
Posts: 548

Rep: Reputation: 33
So many to choose from, I do not believe you can make a bad choice. I like Red Hat & Fedora and CentOS (a Red Hat clone). I administer Linux production servers running 300+ gig oracle databases, so I am biased to Red Hat. I'm sure other Linux's would work in place of RH, but you go with what you know.
 
Old 08-05-2009, 04:59 PM   #8
unixfool
Member
 
Registered: May 2005
Location: Northern VA
Distribution: Slackware, Ubuntu, FreeBSD, OpenBSD, OS X
Posts: 782
Blog Entries: 8

Rep: Reputation: 158Reputation: 158
Any recommendation will depend on how you plan to use it and what software you'll be utilizing, ON TOP OF THE DISTRO. For instance, OpenBSD will be tight, but when you add a php-based app to it, you're more than likely lessening OpenBSD's tightness.

Just pick a flavor and begin your experience. No matter what you pick, you're going to learn something.
 
Old 08-07-2009, 12:35 AM   #9
sabir_mustafa
Member
 
Registered: Aug 2009
Location: Rawalpindi
Distribution: RHEL 5, CentOS
Posts: 38

Original Poster
Rep: Reputation: 16
I have planned to use combination of RHEL5 and ubuntu. It may be challenging to manage but I also want this combination to be equally difficult and challenging for the foreign attacks on my machines. Any suggestions?
 
Old 08-11-2009, 10:46 AM   #10
nowonmai
Member
 
Registered: Jun 2003
Posts: 481

Rep: Reputation: 48
Not entirely sure what you mean by a 'combination'...

Why limit yourself to any distro, or any few... I have a testing box... it's an old P4 with 1GB RAm and a 500GB HDD and I have a bunch of distros on it... Debian, Ubuntu, Fedora, Centos, Slackware, Gentoo, OpenBSD, Solaris.

If you intend to be in any way proficient in the Unix world, you should expose yourself to all you can.

As for attacks on your machines... I wouldn't worry about it... 99.9% of attacks are from bots or inept script kiddies and wouldn't penetrate an unpatched XP SP1 box running IIS6, let alone a Linux box.

For fun, you should put together a honeypot or darknet...
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: DeLi Linux: A light Linux distribution, done right LXer Syndicated Linux News 0 01-15-2007 01:33 PM
Customizing a distribution to add my artwork and design for a brand new distribution caa718 Linux From Scratch 3 03-19-2006 05:03 PM
Contents of /etc/<distribution>_version and /etc/<distribution>-release ghaefb Linux - Distributions 6 02-03-2006 06:46 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 12:41 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration