LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions
User Name
Password
Linux - Distributions This forum is for Distribution specific questions.
Red Hat, Slackware, Debian, Novell, LFS, Mandriva, Ubuntu, Fedora - the list goes on and on... Note: An (*) indicates there is no official participation from that distribution here at LQ.

Notices


Reply
  Search this Thread
Old 07-12-2014, 04:53 PM   #1
punchy71
Member
 
Registered: Dec 2011
Posts: 178

Rep: Reputation: Disabled
High security and privacy OS's that can be installed to hard disk


Greetings,
I have been reviewing various different security and privacy oriented Linux and BSD distros. It seems like the most secure and private distros that I have seen thus far (Liberte and Tails) you can't even install to hard drive but must use them as a "live cd" only. I am needing an OS with this level of security and privacy features yet can be installed to a hard disk. Any suggestions?

Thanks
 
Old 07-12-2014, 05:18 PM   #2
TobiSGD
Moderator
 
Registered: Dec 2009
Location: Germany
Distribution: Whatever fits the task best
Posts: 17,148
Blog Entries: 2

Rep: Reputation: 4886Reputation: 4886Reputation: 4886Reputation: 4886Reputation: 4886Reputation: 4886Reputation: 4886Reputation: 4886Reputation: 4886Reputation: 4886Reputation: 4886
That Liberte and Tails can't be installed to HD is part of their security concept. You can't alter read-only media like CDs and DVDs, so it is impossible install a rootkit or replace binaries with compromised versions. Installing them to a harddisk makes them less secure, so it is not intended.

Anyways, any Linux distribution/BSD (with some exclusions, like Puppy) can be set up to be secure and have options for increased privacy. OpenBSD is known for its main focus being security, so I would start with that.
 
Old 07-12-2014, 07:49 PM   #3
jefro
Moderator
 
Registered: Mar 2008
Posts: 22,361

Rep: Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692Reputation: 3692
You can install any live cd to a hard drive but it may still act like a live cd. For example LPS can be put on a usb or hard drive but the squash file is not writable.

Distro's are not secure. Some of the BSD's make some pretty good claims (maybe well worth it) but that is OS only. When you start adding in apps you get more and more holes with each app.

Last edited by jefro; 07-12-2014 at 07:51 PM.
 
Old 07-13-2014, 04:02 PM   #4
ReaperX7
LQ Guru
 
Registered: Jul 2011
Location: California
Distribution: Slackware64-15.0 Multilib
Posts: 6,567
Blog Entries: 15

Rep: Reputation: 2125Reputation: 2125Reputation: 2125Reputation: 2125Reputation: 2125Reputation: 2125Reputation: 2125Reputation: 2125Reputation: 2125Reputation: 2125Reputation: 2125
If you want a more secure installable OS, you should look into OpenBSD and Hardened Gentoo.

They're not 100% perfect, in fact, no system is 100% including LiveDisks, but they represent efforts to focus more on security and stability than pumping out packages. Just about any distribution that focuses on stability and has a good security handling policy of issuing updates as required for security can be fairly effective.

However even then, any system can be fairly secure if you have a well made security policy that is tested, has proper security clearance levels for users, locks down certain services and ports, utilizes jails and control groups to limit resources and sandbox problematics, and other things.
 
Old 07-13-2014, 04:53 PM   #5
John VV
LQ Muse
 
Registered: Aug 2005
Location: A2 area Mi.
Posts: 17,700

Rep: Reputation: 2658Reputation: 2658Reputation: 2658Reputation: 2658Reputation: 2658Reputation: 2658Reputation: 2658Reputation: 2658Reputation: 2658Reputation: 2658Reputation: 2658
ALL os's are secure or INSECURE
it depends on how one sets it up

I would use CentOS 6.5 with full disk encryption
keep SE set to enforcing and targeted
uninstall unneeded services and programs

lock up firefox ( look into Tor-bundle)
 
Old 07-13-2014, 08:12 PM   #6
punchy71
Member
 
Registered: Dec 2011
Posts: 178

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by TobiSGD View Post
Anyways, any Linux distribution/BSD (with some exclusions, like Puppy) can be set up to be secure and have options for increased privacy.
Hmm, why can't Puppy Linux be made secure?
 
Old 07-13-2014, 08:30 PM   #7
TobiSGD
Moderator
 
Registered: Dec 2009
Location: Germany
Distribution: Whatever fits the task best
Posts: 17,148
Blog Entries: 2

Rep: Reputation: 4886Reputation: 4886Reputation: 4886Reputation: 4886Reputation: 4886Reputation: 4886Reputation: 4886Reputation: 4886Reputation: 4886Reputation: 4886Reputation: 4886
Puppy is a single user system by design, you are always root.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
hard disk prices artificially high? timetraveler Linux - General 12 12-21-2011 05:18 AM
hard disk memory usage weirldy high nikooo777 Linux - Security 2 04-02-2010 02:33 PM
Security for operating system and hard disk funnybossvn Linux - Security 1 05-15-2006 02:03 PM
Can Knoppix be installed on hard-disk? ZhiYi Linux - Software 3 04-25-2005 06:09 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions

All times are GMT -5. The time now is 12:06 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration