LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Linux From Scratch
User Name
Password
Linux From Scratch This Forum is for the discussion of LFS.
LFS is a project that provides you with the steps necessary to build your own custom Linux system.

Notices


Reply
  Search this Thread
Old 04-12-2015, 03:50 PM   #1
dragoraexpirafuego
Member
 
Registered: Apr 2015
Location: 9800 Savage Rd, Ft Meade, MD 20755
Distribution: TAILS, Dragora, BLAG, Parabola, Trisquel, Guix, gNewSense, Kali, PHLAK, BackBox, BlackArch, Slackwar
Posts: 34

Rep: Reputation: 0
where do I start when building a secure OS?


I guess you'd need to have secure hardware, which is nearly impossible...
are there any legit options?

then what?? what do I code?
 
Old 04-12-2015, 04:14 PM   #2
spiky0011
Senior Member
 
Registered: Jan 2011
Location: PLANET-SPIKE
Distribution: /LFS/Debian
Posts: 2,511
Blog Entries: 1

Rep: Reputation: 412Reputation: 412Reputation: 412Reputation: 412Reputation: 412
Hi

Lfs version of hardened lfs here http://www.linuxfromscratch.org/hlfs/view/development/
is old out of date 2011. But might be worth looking at.
Gentoo do a hardened version here https://www.gentoo.org/downloads/

found this http://grsecurity.net/
Hope this helps.

Last edited by spiky0011; 04-12-2015 at 04:20 PM.
 
Old 04-12-2015, 09:50 PM   #3
veerain
Senior Member
 
Registered: Mar 2005
Location: Earth bound to Helios
Distribution: Custom
Posts: 2,524

Rep: Reputation: 319Reputation: 319Reputation: 319Reputation: 319
With LFS you may use selinux, acls, capabilities, fpie, fpic, stack smashing protectors to increase security.
 
Old 08-24-2015, 11:06 PM   #4
Jerasmussen
Member
 
Registered: Jul 2015
Location: San Antonio, TX
Distribution: XCP on Debian Wheezy; Raspbian; HLFS
Posts: 30

Rep: Reputation: Disabled
http://pax.grsecurity.net
http://hypervion.blogspot.com/2012/0...2-bit-x86.html
http://akari.osdn.jp/index.html.en

Last edited by Jerasmussen; 08-24-2015 at 11:09 PM. Reason: Add addl url
 
Old 08-25-2015, 01:55 AM   #5
ReaperX7
LQ Guru
 
Registered: Jul 2011
Location: California
Distribution: Slackware64-15.0 Multilib
Posts: 6,558
Blog Entries: 15

Rep: Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097Reputation: 2097
The first place you need to start is an evaluation of what you think your system will need, and how much security you can tolerate.

Drafting a security contingency plan is where you need to begin. Look at packages in stable releases as well. Look for patches that enhance security protocols, and those that boost compatibility with the system and applications.

Set up strong passwords and enforce their usage.

Hardening is a rather blanket term, but you don't technically need SELinux, AppArmor, etc. They are security minded, but the real work is going to be how much you are willing to dedicate to securing your system using common sense techniques first, and careful planning.
 
Old 08-25-2015, 10:39 AM   #6
Jerasmussen
Member
 
Registered: Jul 2015
Location: San Antonio, TX
Distribution: XCP on Debian Wheezy; Raspbian; HLFS
Posts: 30

Rep: Reputation: Disabled
Very True:

All the software in the world can't protect you if the permissions are set incorrectly.

Regards
James Rasmussen
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Which Linux/Linux distros may the best for building a reliable and secure server rajiv yadav Linux - Server 4 01-18-2011 07:41 AM
Building a super secure Linux Server Zepiroth Linux - Security 29 07-18-2008 11:09 AM
Building a Secure File Transfer Gateway - thoughts please taphagreg Linux - Server 2 03-15-2007 01:43 PM
Building a Small / Secure Business Network gbkyle Linux - Networking 6 07-13-2005 06:15 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Linux From Scratch

All times are GMT -5. The time now is 08:06 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration