- Castle - http://castle.altlinux.ru
Server distribution from ALT Linux Team. Improved security is achieved with the use of RSBAC, general privilege separation approaches, and certain pieces and ideas from Owl. A beta is available for testing and use.
- Trustix - http://www.trustix.net/
Server distribution; packages chosen based on their security record, safe defaults used. Available for use.
- EnGarde - http://www.engardelinux.org/
Server distribution, goal: provide level of security needed to create corporate web presence or conduct business on Web. Security achieved via included software and using principle of least privilege; available for use.
- Security Enhanced Linux - http://www.nsa.gov/selinux/
NSA research prototype made public, has modified kernel, several utilities; has enhanced security-related functions designed to show value of mandatory access controls and how such can be added to Linux; not a full OS distribution.
- Owl - http://www.openwall.com/Owl/
Openwall GNU/*/Linux is a server distribution; main means to security: proactive source code review, privilege separation; several other means also used. Available for use. English, French, German, Russian.
- HP Secure OS Software for Linux - http://www.hp.com/security/products/linux/
Server platform using compartmentalization to contain processes to known part of filesystem and network; has system level auditing, supports remote configuration. Mostly closed source. Was commercial product, now discontinued, unsupported.
- Astaro Internet Security - http://www.astaro.com
Appliance-based special-purpose hardened Linux distribution with firewall, VPN, anti-virus functionality. Some functionality is available for free for home use, the rest is commercial.
- Devil-Linux - http://www.devil-linux.org/
Small CD-based distribution used for firewalls, routers. System configuration settings are stored on separate floppy disk. Descriptions, news, documents, downloads, links.
- Sentry Firewall CD - http://www.sentryfirewall.com/
Linux-based bootable CD suitable for use as low cost, easy to maintain firewall or IDS node.
- Project Plan-B - http://www.projectplanb.org/
Bootable linux live CD-ROM for system and network security testing.
- JBLinux - http://www.jblinux.net/
Distribution designed mainly for security, performance, and to provide users with current, high quality software. All packages optimized for Pentium-class CPUs.
- Migrating to Astaro Security Linux - http://www.linuxjournal.com/article.php?sid=7313
Fed up with costly, complex firewalls, e-gaming firm eBet Ltd., picks open source security; senior systems administrator knew he needed to upgrade from Check Point 4.0 perimeter firewall. [Linux Journal]
|
