This is more oriented towards the slackware distribution. I wasn't sure which forum to post it in. Also this is kind of a dual probe for information.

What is more secure about slackware linux over windows besides the argument that someone would more likely write a virus for a windows machine than slackware/linux?

also,

What are some security enhancements that can be done with slackware..besides
proper passwords, locking out ports, enabling firewall, and selinux?

I suppose that is kind of a hard question because it depends on what the intent is and what software you are running.

Lets say I just wanted to make a web server out of slackware, no ftp or mail server...just a regular apache web server with ssl configured.

can anyone provide a nice link to learn from or just a small tweak that I may not be aware of?

Basically I have Done enough with slackware to use it as a desktop, but I understand that it's capabilites are nice in the server world as well. I am just gathering some options/opinions for me to look into.

In the deepest sense Windows isn't any more or less secure than Slackware (well, at least if you intend to do anything about security), it depends on what you do with them. Security isn't a small tweak you do, it's a policy you obey.

Thumb rule: if you know what you want to do (for example serve web pages), then only allow that and deny, restrict and block anything else - and be paranoid about that.

If you spare a minute with Google it'll show you tons of information about how you can measure the security of a server, or even a Unix/Linux server, maybe even Slackware specifically, and how to enhance it. It's not a small thing or two, prepare to spend as much time with the matter as you can

To add to what b0uncer was saying and your question of slackware vs windows he is absolutely correct in saying one isn't more secure then the other and that it is how tight you keep your box and how well you follow your policy.

What I would like to add tho, is a more linux vs windows comparison. And please lets not make this into a debate because that isn't the intention:

Comparing the two operating systems is kinda a double edged sword.

On one side, windows is closed source and linux is open source so technically if you wanted to look for an exploit or code a virus it would be easier to do for a linux machine rather then windows. And I'm saying this refering to a 0-day virus using a new method. Not a hole already out there.

However, the benifit to running linux other then windows is that with linux you have literally millions of programmers looking through the code who will be able to spot the vulnerabilities quick then the few hundred microsoft has. (or thousands I don't know)
On top of that if a virus is released those millions of programmers can usually get a fix (well usually multiple fixes) out quicker then windows can get one added into its auto updates.

This was just one of the differences that I believe is a big plus to using linux over windows.

Again my views may be very different from yours and there are already linux vs windows threads so lets not make this into one.

nomb

***EDIT*** Once you decide what kind of server you'd like to run (if that is your intention, I'm sure we can help you make it more secure.)

If your talking about just general security, I would start low and work up. Make sure it is fully updated, turn of services your not using/need and make sure you know how to use iptables.

That really makes sense, two thumbs up !

very true. I wasn't aware of that.

not yet :-)


Ok Well thank you both. For the most part I have been trying out Distros for the last 10 years. I'll use them as my desktop for a couple weeks and then change again. I can do admin things and consider myself alright in that area, but really haven't done anything professional in the server side of things. It's nice to get some feedback. Thank you again.