Re: The secure distribution listing

[ari <edelkind-securedistros@episec.com>]

dkumar@noida.hcltech.com said this stuff:

[...]
> I have looked at SELinux by NSA and a example policy configuration by NAI
> Labs. The overall stuff is quite impressive. I am agree with the fact that
> no distro can be secure for sure untill it secures the kernel (i mean uses
> the security patches for kernel like LIDS and MAC etc). Some of distros like
> Engarde and Kaladix etc. include these features also. Can we list the
> essential/desired security features in a secure distro ??

I began a document some time ago with this very purpose in mind -- to list
the _minimum_ security requirements for general unix-related distributions.
It can be found at:

	http://www.episec.com/documents/sdg/unix-sdg.html

I wrote the information listed there in a couple of hours, and it is far
from complete.  Unfortunately, i haven't had the freedom to work on it in
the past number of months.  I welcome criticism and contributions.  In the
future, i hope to turn this into a whitepaper; all contributors will be
credited.

To ease discussion, relevant replies should ideally be sent to the list.

ari

[...]


--
.----------------------------- ari ------------------------------.
 Chief of Technical Operations             edelkind[at]episec.com
 Epi Security Industries [Episec, Inc.]        New York, NY [USA]
                                                   www.episec.com
`-------------- internet security for the paranoid --------------'

--
Securedistros: A common list for all secured Linux distributions
Archive:       http://mail.nl.linux.org/securedistros/