Dear Colleagues,

this question returning like a boomerang but any how I would like to ask for it.


If You would like to build (Build from scratch) highly secure application environment, which system will You choose as a base ? BSD or Linux ?



I`m working with Linux since many years, but I heard some really positive opinions from my other colleagues about BSD security level and possibilities. I must build highly secure environment for one single php application (nginx, php-fpm). Which system will You choose to protect access to the system ?


I will really appreciate if You will also write here the reasons, why You choosing this and not that.


Thanks in advance for all answers.

Have you at least done some research and read something like this, this, this or this before asking?
Also because you didn't define "highly secure" as a formal set of company, client, compliance or other criteria my reply would be "it depends". For me it doesn't matter: if a client wants RHEL then they'll pay for a RHEL license and if they want a BSD then that's what they'll get.


I can not and will not choose for you. You know what you are familiar with and besides it's your responsibility anyway ;-p


Yeah, just like you did here?..

Ehh... yes, to Your information, I putted reasons why I`m thinking this way. This is my personal opinion and I`m not planning to change it. Word "crap" was to hard, if I hurt You... sorry.


To be honest, I`m not searching this what everybody can find on the internet, rather people which done some projects on the both systems - BSD and Linux.
I`m looking for some information`s/opinions about memory footprint on the both systems, network traffic filtering, security solutions like SELinux ... etc.

I don't know if you noticed: I'm a moderator here. One of the quality control things I'm concerned with is for members to provide technically sound and unbiased information. And let's make it clear "crap" just is not any of that. Understand?


I don't know about you but business-wise I am accustomed to having company, client, compliance and other requirements as input to help me assess what to suggest. So that's why I asked you to start by defining "highly secure". If you don't have any then list whatever relevant project details you have got.

Years has passed unSpawn bad attitude has remained.

Just drop that post... I already got feedback from one colleague which deployed applications on both systems.
Please do not cry so hard about the "crap"... I already said that I used bad word in the previous post and don't want to do it 1000 times.

From the LQ Rules:

Bad attitude? Personally, I find unSpawn to be one of the board's better moderators.

Last warning: Keep this thread on topic.