Just a random question but is there a version of Slackware out there that uses the SELinux kernel and favors high security, much like Hardened Gentoo?

Do you think Slackware need those features?
It's already secured by default installation since it doesn't enable too many daemon services at installation phase and it has included well-tested applications to the default stock packages

The rest is up to the admin to configure the whole system

Was only curious.

A lot of the Slackware specific hardening information is older and scattered. Various GURU's no doubt have yet to impart their hard earned wisdom. It also depends what security you want or need: general server, web, ssh etc. Might not be a bad idea to include a hardening chapter in the "new" slackbook (Don't look at me; I'm not worthy!). Here is some stuff I looked at ages ago:

http://www.linuxquestions.org/questi...ckware-292781/

http://dentonj.freeshell.org/

http://www.slackzine.com.br/hardening_slack.php

http://www.sastk.org/

Interesting stuff. Though most of it is for things like 13.0 and older versions of the OS, I am wondering if some of it could be updated to run with the newer releases like 13.37 and 14.0 (when released).

The only thing I haven't really seen around the net for Slackware is how to rebuild the kernel to SELinux specifications. I'll see what I can get from the HLFS (Hardened Linux from Scratch) project and see if any of it could translate into Slackware.

Wikipedia claims that a Slackware specific port of SELinux and packages was available at one time but development had stagnated.

Thanks King.

I recommend using Grsecurity.
I have it running without any problems on a 13.0 server, but I don't see any limitations running it on newer Slackware versions.

+1. I compiled grsec into a Slamd64 11.0 machine that I built as a fairly busy multiport firewall/router a number of years ago. Very happy with the results. Fast, secure, rock solid.

blackhole:~# cat /etc/slackware-version; uname -a; uptime
Slackware 11.0.0 (x86_64)
Linux blackhole 2.6.19.2-grsec #3 Sat Apr 28 20:37:38 PDT 2007 x86_64 x86_64 x86_64 GNU/Linux
10:17:05 up 1461 days, 3:37, 5 users, load average: 0.00, 0.00, 0.00

Other distros need hardened versions because they're bugged by default while Slackware isn't. (How come Fedora springs to my mind, I don't know)

All software contains bugs and Slackware is NOT deliberately hardened by default. It just turn on everything out-of-the-box. That is not the same as hardening an operating system. Slackware can be hardened, any Linux distribution can, however security is a process not a one-off configuration and maintaining that stance requires a knowledgeable and vigilant admin. That doesn't apply to most users or any operating system.

1 members found this post helpful.