首页

From owner-securedistros@nl.linux.org Sat Nov 3 19:38:01 2001 Received: (root@humbolt.nl.linux.org) by humbolt.nl.linux.org id ; Sat, 3 Nov 2001 19:37:54 +0100 Received: from 1-096.ctame701-1.telepar.net.br ([IPv6:::ffff:200.181.137.96]:34202 "EHLO 1-096.ctame701-1.telepar.net.br") by humbolt.nl.linux.org with ESMTP id ; Sat, 3 Nov 2001 19:37:42 +0100 Received: (from localhost user: 'riel', uid#500) by imladris.surriel.com with ESMTP id ; Sat, 3 Nov 2001 16:37:29 -0200 Date: Sat, 3 Nov 2001 16:37:29 -0200 (BRST) From: Rik van Riel X-X-Sender: To: Subject: ADMIN: Majordomo -> Listar Message-ID: X-spambait: aardvark@kernelnewbies.org X-spammeplease: aardvark@nl.linux.org MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-securedistros@nl.linux.org Precedence: bulk Reply-To: securedistros@nl.linux.org Return-Path: X-Envelope-To: <"|/bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-list Original-Recipient: rfc822;securedistros-list Hi, I've just converted the securedistros mailing list from Majordomo to Listar, this should be largely transparent for users, though the fact that the "Sender:" header has changed slightly could confuse some mail filters... If you have any questions, please let me know. kind regards, Rik -- DMCA, SSSCA, W3C? Who cares? http://thefreeworld.net/ http://www.surriel.com/ http://distro.conectiva.com/ - Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Thu Nov 8 00:33:16 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:22225 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Thu, 8 Nov 2001 00:33:10 +0100 Received: with LISTAR (v1.0.0; list securedistros); Thu, 08 Nov 2001 00:27:25 +0100 (CET) Received: from [IPv6:::ffff:61.135.87.4] ([IPv6:::ffff:61.135.87.4]:37904 "HELO lzm") by humbolt.nl.linux.org with SMTP id ; Thu, 8 Nov 2001 00:27:16 +0100 Received: from mail by titan.seed.net.tw with SMTP id aZvDKfTxXxJt2yPCR5D2e4acs; Thu, 08 Nov 2001 07:23:28 +0800 Message-ID: From: lcd@btamail.net.cn To: MAILCITYCOM@nl.linux.org, Mailcom@nl.linux.org, Mailgd@nl.linux.org, MAILNETEASE@nl.linux.org, Mil263@nl.linux.org, Neasenet@nl.linux.org, Sohucom@nl.linux.org, Tj-mail@nl.linux.org, Trueml@nl.linux.org, Usanet@nl.linux.org, Verified@nl.linux.org, WUXI-MAIL@nl.linux.org, YAHOO0000@nl.linux.org, YAHOO0001@nl.linux.org, Yeahnet@nl.linux.org, YNMAILCOM@nl.linux.org, Zg169net@nl.linux.org, ZKMAIL-777CN@nl.linux.org, ZKPUBLIC-CN@nl.linux.org, ZKTELEKBIRDC@nl.linux.org Subject: =?big5?Q?=B9=FA=C4=DA=CA=D7=B4=B4=BC=DB=CE=BB3680=D4=AA=D2=BA=BE=A7=B2=CA=C9=AB=CD=B6=D3=B0=BB=FA=B3=CF=D5=F7=C8=AB=B9=FA=BE=AD=CF=FA=C9=CC?= X-Mailer: rbqQ5K0OFpl3D9BoEkPQYOJ Content-Type: text/plain; Content-Transfer-Encoding: Quoted-Printable X-Priority: 3 X-MSMail-Priority: Normal Date: Thu, 8 Nov 2001 00:27:16 +0100 X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: lcd@btamail.net.cn Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org =BD=FC=C8=D5=CD=C6=B3=F6=D2=BA=BE=A7=CD=B6=D3=B0=BB=FA3680=D4=AA=C3=BF=CC=A8=A3=AC =C0=FB=C8=F3=B7=E1=BA=F1=A3=AC=C4=BF=C7=B0=D5=F7=BC=AF=C8=AB=B9=FA=B4=FA=C0=ED=BE=AD=CF=FA=C9=CC=A3=A1=A3=A1 =C1=AA=CF=B5=A3=BA=C0=EE=CF=C8=C9=FA =B5=E7=BB=B0=A3=BA010-82852440=A3=AC63809622=A3=AC63869054 =B4=AB=D5=E6=A3=BA010-68677760 =B5=D8=D6=B7=A3=BA=B1=B1=BE=A9=B7=E1=CC=A8=C7=F8=B7=E1=B1=B1=C2=B722=BA=C5 =CD=F8=D6=B7=A3=BAwww.lcd-product.com www.cn-projector.com =D3=CA=BC=FE=A3=BAlcd@btamail.net.cn =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =B1=BE=D3=CA=BC=FE=CA=F4=D2=BB=B4=CE=D0=D4=C9=CC=D2=B5=D3=CA=BC=FE=A3=AC=C8=E7=B7=C7=C4=E3=CB=F9=D4=B8=A3=AC=C7=EB=D2=D4=A3=BA=C8=A5=B3=FDxxxx@xxx.xxx=B8=F1=CA=BD=CE=AA=B1=EA=CC=E2=D6=B1=BD=D3=BB=D8 =D3=CA=A3=BAlcd@btamail.net.cn =CF=B5=CD=B3=BD=AB=B9=FD=C2=CB=C4=E3=B5=C4=B5=D8=D6=B7=A3=AC=B8=F8=C4=E3=D4=EC=B3=C9=B5=C4=B2=BB=B1=E3=CE=D2=C3=C7=C9=EE=B1=ED=C7=B8=D2=E2=A3=A1 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Thu Nov 8 12:58:59 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:12984 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Thu, 8 Nov 2001 12:58:41 +0100 Received: with LISTAR (v1.0.0; list securedistros); Thu, 08 Nov 2001 12:55:57 +0100 (CET) Received: from [IPv6:::ffff:202.96.44.20] ([IPv6:::ffff:202.96.44.20]:64662 "EHLO smtp.263.net") by humbolt.nl.linux.org with ESMTP id ; Thu, 8 Nov 2001 12:55:44 +0100 Received: from Nancy (unknown [210.77.128.118]) by smtp.263.net (Postfix) with ESMTP id 9C64B1CCCFE1B; Thu, 8 Nov 2001 17:09:25 +0800 (CST) From: "Nancy" To: "Friends" Subject: =?ISO-8859-1?Q?=CE=D2=CC=AB=C3=A6=C1=CB=A3=A1?= Date: Wed,8 =?ISO-8859-1?Q?=CA=AE=D2=BB=D4=C2?= 2001 17:06:36 +0800 X-Priority: 1 X-MSMail-Priority: High MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_1" Message-Id: <20011108090925.9C64B1CCCFE1B@smtp.263.net> X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: Nancy@jinfengnet.com Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org ------=_NextPart_1 Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: 8bit 好友：你好吗？最近我很好！每天都收到很多很多钱，的确感觉好极了！！只不过忙了点儿！这么多钱，处理好半天呢！上次给你介绍的两个全中文网站“大富翁”和“CASH 大家赚”： http://qin519.4567.net （或：http://www.legendca.com） http://www.legend-ca.com （或：http://qin518.4567.net）你访问了吗？作为这两个网站的会员，加入不到半个月，我每天都能收到很多钱了！！真的不骗你！好多人通过这种世界流行的“多层次网络营销 MLM” 成为了百万富翁，这就是 Internet 的力量！有钱大家赚！如果你还没有成为会员，不要吝啬短短5分钟时间，几分钟往往会改变人一生的命运！赶快访问吧！不要犹豫： http://qin519.4567.net （或：http://www.legendca.com） http://www.legend-ca.com （或：http://qin518.4567.net）赶快加入吧！越早越好！恭喜发财！如果现在暂时没有时间，以后访问也行啊！记住这两个网址吧： http://www.legendca.com （或：http://qin519.4567.net） http://www.legend-ca.com （或：http://qin518.4567.net）这两个网站各有千秋，两个都不要错过啊！如果想先加入一个试试，我强烈推荐“大富翁”： http://www.legendca.com （或：http://qin519.4567.net）这个网站网速非常快！！而且管理起来也非常非常容易！另外，网站在不断升级，遇到升级的时候，如果出现暂时不能连接的情况，可不要没有耐心啊！点击我提供的四个域名中的其他几个试试！或者过两天再试试看！网站总会越来越快的。如果登记时出现报错，不用担心，鼠标按“否”就 OK 了！快快加入！时间不等人！钱也不等人！恭喜你也发财！你的朋友：Nancy ★ 千万别错过机会！！！★ ------------------------------------------------- ※ 别删我这封信，留着或许还有用呢！※ -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Fri Nov 16 15:29:01 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:13477 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Fri, 16 Nov 2001 15:15:47 +0100 Received: with LISTAR (v1.0.0; list securedistros); Fri, 16 Nov 2001 15:14:09 +0100 (CET) Received: from metis1.microunity.com ([IPv6:::ffff:192.86.6.23]:8460 "EHLO metis.microunity.com") by humbolt.nl.linux.org with ESMTP id ; Wed, 14 Nov 2001 21:31:50 +0100 Received: from gaea.microunity.com (gaea.microunity.com [192.86.7.134]) by metis.microunity.com (8.8.8/8.8.8) with ESMTP id MAA03195 for ; Wed, 14 Nov 2001 12:31:42 -0800 (PST) Received: from arwin.microunity.com (arwin.microunity.com [192.86.7.81]) by gaea.microunity.com (8.8.8/8.8.8) with ESMTP id MAA28066 for ; Wed, 14 Nov 2001 12:31:41 -0800 (PST) Received: from localhost (vancleef@localhost) by arwin.microunity.com (8.11.6/8.9.1) with ESMTP id fAEKVea21816 for ; Wed, 14 Nov 2001 12:31:40 -0800 X-Authentication-Warning: arwin.microunity.com: vancleef owned process doing -bs Date: Wed, 14 Nov 2001 12:31:40 -0800 (PST) From: Bob Van Cleef To: Subject: Re: What are your favorite home-grown hardening techniques? In-Reply-To: <20010725115329.A6337@Megaglobal.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: vancleef@microunity.com Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org This morning I stumbled across a debian collection of packages labled "harden" which actually appear to include an installation of Bastille. I've installed it on a test host for evaluation... Bob -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Wed Nov 21 22:44:15 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:3995 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Wed, 21 Nov 2001 22:44:04 +0100 Received: with LISTAR (v1.0.0; list securedistros); Wed, 21 Nov 2001 22:42:27 +0100 (CET) Received: from perninha.conectiva.com.br ([IPv6:::ffff:200.250.58.156]:33810 "EHLO perninha.conectiva.com.br") by humbolt.nl.linux.org with ESMTP id ; Wed, 21 Nov 2001 22:41:58 +0100 Received: from burns.conectiva (burns.conectiva [10.0.0.4]) by perninha.conectiva.com.br (Postfix) with SMTP id BC15638C5B for ; Wed, 21 Nov 2001 18:41:57 -0300 (EST) Received: (qmail 9358 invoked by uid 0); 21 Nov 2001 21:38:42 -0000 Received: from duckman.distro.conectiva (10.0.17.2) by burns.conectiva with SMTP; 21 Nov 2001 21:38:42 -0000 Received: (from localhost user: 'riel', uid#500) by duckman.distro.conectiva with ESMTP id ; Wed, 21 Nov 2001 19:41:48 -0200 Date: Wed, 21 Nov 2001 19:41:48 -0200 (BRST) From: Rik van Riel X-X-Sender: To: Cc: , , Subject: ADMIN: LSG2 web interface Message-ID: X-spambait: aardvark@kernelnewbies.org X-spammeplease: aardvark@nl.linux.org MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: riel@conectiva.com.br Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org Please reply to me personally and not to the list, thank you. ============================================================= Hi, today I finally put Listar's web interface online; using this interface users can subscribe, unsubscribe and set various flags on themselves, like DIGEST mode ... This web interface is linked from the mail archive pages and put under SSL: https://mail.nl.linux.org/cgi-bin/lsg2.cgi kind regards, Rik -- Shortwave goes a long way: irc.starchat.net #swl http://www.surriel.com/ http://distro.conectiva.com/ -- List-owners: list for mailing list owners on NL.linux.org Archive: http://mail.nl.linux.org/list-owners/ -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Thu Nov 22 09:38:55 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:47333 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Thu, 22 Nov 2001 09:38:49 +0100 Received: with LISTAR (v1.0.0; list securedistros); Thu, 22 Nov 2001 09:37:57 +0100 (CET) Received: from pentafluge.infradead.org ([IPv6:::ffff:195.224.55.251]:30724 "EHLO pentafluge.infradead.org") by humbolt.nl.linux.org with ESMTP id ; Thu, 22 Nov 2001 09:37:41 +0100 Received: from [210.77.155.210] (helo=yesky.com) by pentafluge.infradead.org with smtp (Exim 3.22 #1 (Red Hat Linux)) id 166pCJ-0002t5-00 for ; Thu, 22 Nov 2001 08:27:03 +0000 Received: from ww([211.155.22.23]) by yesky.com(JetMail 2.5.3.0) with SMTP id jm1613bfcbaf6; Thu, 22 Nov 2001 06:46:28 -0000 From: ww To: 988@klaava.helsinki.fi, securedistros@nl.linux.org, a0s-dev@kha0s.org, security-audit@ferret.lmh.ox.ac.uk, nait@ynmail.co, shaylong@soim.ne, mr_yulei@yeah.ne, llhc@263.ne, yml@public.glptt.gx.c, liuhui@necas.nec.co.jp, zjlws@126.co, eng@diablo.jftt.fujitsu.co.jp, sender@126.con, alias-name@your.domain.name, ljh@ccca.nctu.edu.tw, bbs@mic.ee.ntu.edu.tw, daniel@rs560.ncu.edu.tw, mikeshang@163.ne Subject: =?ISO-8859-1?Q?=D2=AB=D0=C7=C8=ED=BC=FE=A3=AC=D0=C7=BC=B6=B7=FE=CE=F1?= Mime-Version: 1.0 Content-Type: text/html; charset=gb2312 X-Priority: 1 (High) Message-Id: Date: Thu, 22 Nov 2001 08:27:03 +0000 X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: yx68868@yesky.com Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org 首页

-- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Sat Nov 24 12:03:34 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:26316 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Sat, 24 Nov 2001 12:03:15 +0100 Received: with LISTAR (v1.0.0; list securedistros); Sat, 24 Nov 2001 12:01:22 +0100 (CET) Received: from mail.wzptt.zj.cn ([IPv6:::ffff:202.96.106.130]:11667 "HELO mail.wzptt.zj.cn") by humbolt.nl.linux.org with SMTP id ; Sat, 24 Nov 2001 12:01:00 +0100 Received: from pc1([61.164.216.93]) by mail.wzptt.zj.cn(JetMail 2.5.3.0) with SMTP id jm8b3bffd354; Sat, 24 Nov 2001 10:56:40 -0000 From: =?ISO-8859-1?Q? "=B0=FC=D7=B0=BA=D0?= =?ISO-8859-1?Q?=B2=BB=B8=C9=BD=BA" ?= Subject: =?ISO-8859-1?Q?=C4=BE=D6=C6=C0=F1=C6=B7=BA=D0=A3=AC=B8=F7=D6=D6=CD=AD=C5=C6=A3=AC=B2=BB=B8=C9=BD=BA=A1=A2=BD=BA=D3=A1=B0=FC=D7=B0=BA=D0?= To: =?ISO-8859-1?Q?=C8=E7=D3=D0=B4=F2=C8=C5?=@nl.linux.org, =?ISO-8859-1?Q?=BE=B4=C7=EB=D4=AD=C1=C2=A3=A1?=@nl.linux.org X-Mailer: V3,1,7,1 (W95/NT) (Build: Apr 14 2000) Mime-Version: 1.0 Date: Sat, 24 Nov 2001 18:50:25 +0800 Message-Id: <20011124110111Z16214-30507+74@humbolt.nl.linux.org> X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: stzjh@mail.wzptt.zj.cn Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org 最新产品：本公司新进新设备，专业加工生产各种工艺木盒、酒盒、茶叶盒等各种包装盒。新产品新感觉新档次本公司专业制作铝牌、铜牌、不干胶、胶印包装盒等各种印刷品。本公司面向全国各大小客户，量大可以派人到贵单位商谈业务，签订合同，所有产品交货快，价格便宜，送货上门。电话：0577－63861718 0577－63876017 手机：013057889788 联系人：郑经辉 E-mail:stzjh@mail.wzptt.zj.cn -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Sat Nov 24 12:09:28 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:41422 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Sat, 24 Nov 2001 12:09:23 +0100 Received: with LISTAR (v1.0.0; list securedistros); Sat, 24 Nov 2001 12:08:38 +0100 (CET) Received: from mail.wzptt.zj.cn ([IPv6:::ffff:202.96.106.130]:22443 "HELO mail.wzptt.zj.cn") by humbolt.nl.linux.org with SMTP id ; Sat, 24 Nov 2001 12:08:24 +0100 Received: from pc1([61.164.216.93]) by mail.wzptt.zj.cn(JetMail 2.5.3.0) with SMTP id jm8b3bffd354; Sat, 24 Nov 2001 10:56:40 -0000 From: =?ISO-8859-1?Q? "=B0=FC=D7=B0=BA=D0?= =?ISO-8859-1?Q?=B2=BB=B8=C9=BD=BA" ?= Subject: =?ISO-8859-1?Q?=C4=BE=D6=C6=C0=F1=C6=B7=BA=D0=A3=AC=B8=F7=D6=D6=CD=AD=C5=C6=A3=AC=B2=BB=B8=C9=BD=BA=A1=A2=BD=BA=D3=A1=B0=FC=D7=B0=BA=D0?= To: =?ISO-8859-1?Q?=C8=E7=D3=D0=B4=F2=C8=C5?=@nl.linux.org, =?ISO-8859-1?Q?=BE=B4=C7=EB=D4=AD=C1=C2=A3=A1?=@nl.linux.org X-Mailer: V3,1,7,1 (W95/NT) (Build: Apr 14 2000) Mime-Version: 1.0 Date: Sat, 24 Nov 2001 18:50:25 +0800 Message-Id: <20011124110832Z16325-30507+77@humbolt.nl.linux.org> X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: stzjh@mail.wzptt.zj.cn Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org 最新产品：本公司新进新设备，专业加工生产各种工艺木盒、酒盒、茶叶盒等各种包装盒。新产品新感觉新档次本公司专业制作铝牌、铜牌、不干胶、胶印包装盒等各种印刷品。本公司面向全国各大小客户，量大可以派人到贵单位商谈业务，签订合同，所有产品交货快，价格便宜，送货上门。电话：0577－63861718 0577－63876017 手机：013057889788 联系人：郑经辉 E-mail:stzjh@mail.wzptt.zj.cn -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Thu Nov 29 14:36:41 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:65004 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Thu, 29 Nov 2001 14:36:36 +0100 Received: with LISTAR (v1.0.0; list securedistros); Thu, 29 Nov 2001 14:34:13 +0100 (CET) Received: from [IPv6:::ffff:202.96.44.44] ([IPv6:::ffff:202.96.44.44]:64951 "EHLO mta2.263.net") by humbolt.nl.linux.org with ESMTP id ; Thu, 29 Nov 2001 14:34:03 +0100 Received: by mta2.263.net (Postfix, from userid 60001) id 625701C54567A; Thu, 29 Nov 2001 21:33:19 +0800 (CST) MIME-Version: 1.0 Message-Id: <3C06391F.04860@mta2> Content-Type: Multipart/Alternative; boundary="Boundary-=_aOGpOZjoYLyVeTgWIGjcGLoudUmU" Date: Thu, 29 Nov 2001 21:33:19 +0800 (CST) From: zhou.bin.bing@263.net To: securedistros@nl.linux.org Subject: =?gb2312?B?aGVsbG8=?= X-Priority: 3 X-Originating-IP: [61.157.80.254] X-Mailer: Coremail2.0 Copyright Tebie Ltd., 2001 X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: zhou.bin.bing@263.net Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org --Boundary-=_aOGpOZjoYLyVeTgWIGjcGLoudUmU Content-Type: Text/Html; charset="gb2312" Content-Transfer-Encoding: 8bit hello
i need linux!

--Boundary-=_aOGpOZjoYLyVeTgWIGjcGLoudUmU Content-Type: Text/Plain; charset="gb2312" Content-Transfer-Encoding: 8bit hello i need linux! --Boundary-=_aOGpOZjoYLyVeTgWIGjcGLoudUmU-- -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Thu Nov 29 14:45:08 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:10625 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Thu, 29 Nov 2001 14:44:55 +0100 Received: with LISTAR (v1.0.0; list securedistros); Thu, 29 Nov 2001 14:44:20 +0100 (CET) Received: from burn.univits.se ([IPv6:::ffff:195.242.39.2]:15181 "EHLO ya.univits.com") by humbolt.nl.linux.org with ESMTP id ; Thu, 29 Nov 2001 14:44:04 +0100 Received: from ya.univits.com (localhost [127.0.0.1]) by ya.univits.com (8.12.1/8.12.0) with ESMTP id fATDm0GZ003510 for ; Thu, 29 Nov 2001 14:48:00 +0100 (CET) Received: (from gk@localhost) by ya.univits.com (8.12.1/8.12.0/Submit) id fATDm07M032580; Thu, 29 Nov 2001 14:48:00 +0100 (CET) X-Authentication-Warning: ya.univits.com: gk set sender to gk@univits.se using -f To: securedistros@nl.linux.org Subject: Re: hello References: <3C06391F.04860@mta2> From: Gabriel Kihlman Date: Thu, 29 Nov 2001 14:48:00 +0100 In-Reply-To: <3C06391F.04860@mta2> (zhou.bin.bing@263.net's message of "Thu, 29 Nov 2001 21:33:19 +0800 (CST)") Message-ID: Lines: 15 User-Agent: Gnus/5.090004 (Oort Gnus v0.04) Emacs/20.3 (i386-unknown-openbsd2.7) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: gk@univits.se Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org No, you need coffee! zhou.bin.bing@263.net writes: > hello > i need linux! > > > > > -- /Gabriel -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Thu Nov 29 15:26:56 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:28296 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Thu, 29 Nov 2001 15:26:31 +0100 Received: with LISTAR (v1.0.0; list securedistros); Thu, 29 Nov 2001 15:26:05 +0100 (CET) Received: from velli.mail.jippii.net ([IPv6:::ffff:195.197.172.114]:14270 "EHLO velli.mail.jippii.net") by humbolt.nl.linux.org with ESMTP id ; Thu, 29 Nov 2001 15:25:52 +0100 Received: from simpukka (simpukka.saunalahti.fi [195.74.0.20]) by velli.mail.jippii.net (Postfix) with SMTP id B660C4BB for ; Thu, 29 Nov 2001 16:25:48 +0200 (EET) Date: Thu, 29 Nov 2001 16:26:14 +0200 (EET) From: Petrus Repo X-Sender: pantheon@simpukka To: securedistros@nl.linux.org Subject: Re: hello In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: pantheon@sci.fi Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org Activity!!:) Hm, I suppose this mailing list is quite dead .. -pr On Thu, 29 Nov 2001, Gabriel Kihlman wrote: > > No, you need coffee! > > zhou.bin.bing@263.net writes: > > > hello > > i need linux! > > > > > > > > > > > > -- > /Gabriel > -- > Securedistros: A common list for all secured Linux distributions > Archive: http://mail.nl.linux.org/securedistros/ > -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Thu Nov 29 15:32:44 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:35722 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Thu, 29 Nov 2001 15:32:33 +0100 Received: with LISTAR (v1.0.0; list securedistros); Thu, 29 Nov 2001 15:32:09 +0100 (CET) Received: from VaMelBox.crdp.ac-caen.fr ([IPv6:::ffff:193.49.64.43]:65286 "EHLO VaMelBox.crdp.ac-caen.fr") by humbolt.nl.linux.org with ESMTP id convert rfc822-to-8bit; Thu, 29 Nov 2001 15:31:59 +0100 Received: by VaMelBox.crdp.ac-caen.fr (Postfix, from userid 11) id 32BA860EE; Thu, 29 Nov 2001 15:54:28 +0100 (CET) Received: from crdp.ac-caen.fr (unknown [193.49.66.6]) by VaMelBox.crdp.ac-caen.fr (Postfix) with ESMTP id 73E9C1094 for ; Thu, 29 Nov 2001 14:54:27 +0000 (/etc/localtime) Message-ID: <3C0646F4.4080804@crdp.ac-caen.fr> Date: Thu, 29 Nov 2001 15:32:20 +0100 From: Olivier =?ISO-8859-1?Q?=AB?= Oluve =?ISO-8859-1?Q?=BB?= le Monnier Organization: Cellule TIC, CRDP de Basse-Normandie User-Agent: Mozilla/5.0 (X11; U; Linux i686; fr-FR; rv:0.9.4) Gecko/20011019 Netscape6/6.2 X-Accept-Language: fr-FR, en MIME-Version: 1.0 To: securedistros@nl.linux.org Subject: Re: hello References: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8BIT X-Virus-Scanned: by AMaViS perl-11 X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: olivier.le_monnier@crdp.ac-caen.fr Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org > Hm, I suppose this mailing list is quite dead .. Okay, let's make some noise : Which distro is � natively � the most secure ? -- ----> Olivier � Oluve � Le Monnier <---- - I n f o r m a t i c i e n l i b r e - -- Ing閚ierie 蒬ucative - CRDP-BN -- --- Debian GNU/Linux v2.2rev4 - Woody --- -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Thu Nov 29 15:34:54 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:18317 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Thu, 29 Nov 2001 15:34:37 +0100 Received: with LISTAR (v1.0.0; list securedistros); Thu, 29 Nov 2001 15:34:12 +0100 (CET) Received: from [IPv6:::ffff:202.54.110.230] ([IPv6:::ffff:202.54.110.230]:36107 "EHLO ngate.noida.hcltech.com") by humbolt.nl.linux.org with ESMTP id ; Thu, 29 Nov 2001 15:33:14 +0100 Received: from exch-01.noida.hcltech.com (exch-01 [204.160.254.29]) by ngate.noida.hcltech.com (8.9.3/8.9.3) with ESMTP id UAA32159 for ; Thu, 29 Nov 2001 20:05:27 +0530 Received: by exch-01.noida.hcltech.com with Internet Mail Service (5.5.2653.19) id ; Thu, 29 Nov 2001 20:04:57 +0530 Message-ID: From: Deepak Kumar Gupta To: securedistros@nl.linux.org Subject: RE: hello Date: Thu, 29 Nov 2001 20:04:56 +0530 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain; charset="iso-8859-1" X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: dkumar@noida.hcltech.com Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org Hello Gabriel !! your question is uncomplete. Pls clarify for what purpose you need a linux. If you need a secure distribution then there is a long list available. The is not dead !! i suppose. We can make it live and active..:-).. Regds Deepak. > -----Original Message----- > From: Petrus Repo [mailto:pantheon@sci.fi] > Sent: Thursday, November 29, 2001 7:56 PM > To: securedistros@nl.linux.org > Subject: Re: hello > > > > Activity!!:) > > Hm, I suppose this mailing list is quite dead .. > > > -pr > > > On Thu, 29 Nov 2001, Gabriel Kihlman wrote: > > > > > No, you need coffee! > > > > zhou.bin.bing@263.net writes: > > > > > hello > > > i need linux! > > > > > > > > > > > > > > > > > > > -- > > /Gabriel > > -- > > Securedistros: A common list for all secured Linux distributions > > Archive: http://mail.nl.linux.org/securedistros/ > > > > -- > Securedistros: A common list for all secured Linux distributions > Archive: http://mail.nl.linux.org/securedistros/ > -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Thu Nov 29 15:43:18 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:13202 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Thu, 29 Nov 2001 15:43:09 +0100 Received: with LISTAR (v1.0.0; list securedistros); Thu, 29 Nov 2001 15:42:22 +0100 (CET) Received: from [IPv6:::ffff:202.54.110.230] ([IPv6:::ffff:202.54.110.230]:1036 "EHLO ngate.noida.hcltech.com") by humbolt.nl.linux.org with ESMTP id convert rfc822-to-8bit; Thu, 29 Nov 2001 15:42:12 +0100 Received: from exch-01.noida.hcltech.com (exch-01 [204.160.254.29]) by ngate.noida.hcltech.com (8.9.3/8.9.3) with ESMTP id UAA32314 for ; Thu, 29 Nov 2001 20:14:26 +0530 Received: by exch-01.noida.hcltech.com with Internet Mail Service (5.5.2653.19) id ; Thu, 29 Nov 2001 20:13:56 +0530 Message-ID: From: Deepak Kumar Gupta To: securedistros@nl.linux.org Subject: RE: hello Date: Thu, 29 Nov 2001 20:13:55 +0530 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8BIT X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: dkumar@noida.hcltech.com Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org Hello In my opinion the question is quite abstract. The the need of security in different domain is different, so abstractly you can not say which is most secure distribution. For example for e-buiseness and internet servers EnGarde (http://www.engardelinux.org/) seems to be a promising distribution. Also Trustix (http://www.trustix.net/) is there for same domain. So i think we should talk about a specific domain, when we are talking about the security. This is just my opinion. Any comments on the same are welcome. Regards Deepak. > -----Original Message----- > From: Olivier � Oluve � le Monnier > [mailto:olivier.le_monnier@crdp.ac-caen.fr] > Sent: Thursday, November 29, 2001 8:02 PM > To: securedistros@nl.linux.org > Subject: Re: hello > > > > Hm, I suppose this mailing list is quite dead .. > > > Okay, let's make some noise : > > Which distro is � natively � the most secure ? > > > -- > ----> Olivier � Oluve � Le Monnier <---- > - I n f o r m a t i c i e n l i b r e - > -- Ing閚ierie 蒬ucative - CRDP-BN -- > --- Debian GNU/Linux v2.2rev4 - Woody --- > > -- > Securedistros: A common list for all secured Linux distributions > Archive: http://mail.nl.linux.org/securedistros/ > -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Thu Nov 29 16:09:21 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:56981 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Thu, 29 Nov 2001 16:09:11 +0100 Received: with LISTAR (v1.0.0; list securedistros); Thu, 29 Nov 2001 16:08:25 +0100 (CET) Received: from [IPv6:::ffff:202.54.110.230] ([IPv6:::ffff:202.54.110.230]:22541 "EHLO ngate.noida.hcltech.com") by humbolt.nl.linux.org with ESMTP id ; Thu, 29 Nov 2001 16:08:16 +0100 Received: from exch-01.noida.hcltech.com (exch-01 [204.160.254.29]) by ngate.noida.hcltech.com (8.9.3/8.9.3) with ESMTP id UAA00349 for ; Thu, 29 Nov 2001 20:40:32 +0530 Received: by exch-01.noida.hcltech.com with Internet Mail Service (5.5.2653.19) id ; Thu, 29 Nov 2001 20:40:02 +0530 Message-ID: From: Deepak Kumar Gupta To: securedistros@nl.linux.org Subject: The secure distribution listing Date: Thu, 29 Nov 2001 20:40:01 +0530 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain; charset="iso-8859-1" X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: dkumar@noida.hcltech.com Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org Hello Every Body I am giving the list of available secure distributions. The list can be a useful information for discussing the security issues in these distributions. 1.Trustix Linux: This is a secure server distribution prepared by Trustix AS, which doesn't have X-interface for security and performance reasons. It has also tried to maintain security defaults. More information is available at following link: http://www.trustix.net/ 2.EnGarde Linux: EnGarde Linux is a secure Linux distribution prepared by Guardian Digital, which is designed from the ground up as a secure solution, starting with the principle of least privilege, and carrying it through every aspect of its implementation. This distribution contains kernel patch (for LIDS) and number of tools and utilities for security of host and network systems. The more information is available at following link: -http://www.engardelinux.org/security.html 3.Kaladix hyper secure Linux: The aim of Kaladix Linux is to become an ultra-secure Linux distribution that satisfied all needs of Linux for secure server environment. They are aiming to get B1 security level. More information is available at following link: -http://www.kaladix.org/index.html 4.Immunix Linux: Immunix System is an Immunix-enabled RedHat Linux distribution and suite of application-level security tools. Immunix comes with the FormatGuard (a solution for format bugs which are affecting all the operating system) and includes a SubDomain-enabled kernel (a kernel extension designed to provide least privilege confinement to suspect programs). More information is available at following link: -http://www.immunix.org/ 5.Bastile Linux: Not really a distribution, but a post-install hardening script. The Bastille Hardening System attempts to "harden" or "tighten" the Linux operating system. It currently supports Red Hat and Mandrake systems. More information is available at following link: -http://www.bastille-linux.org/ Selected. 6.Titanium Linux: Titanium-Linux is a Secure Linux Distribution based on the Debian distribution and packaging system. As per the information from its maintainer the distribution is no longer running. More information is available at following link: -http://titaniumlinux.com/ 7.Linux Secure Server Distribution (LSSD): LSSD is an attempt to create a unix distribution, which can be used as a known safe platform on which host and network based applications can run. LSSD founded on the observation that most security approaches are based on the subtractive principle. The distribution was developed with the aim of providing only those utilities and facilities that allow correct booting, administration and maintenance. The more information is available at following link: -http://quatermass.co.uk/pub/lssd/ 8.Gibraltar: Gibraltar is a project that aims to produce a Debian GNU/Linux-based router and firewall package. Gibraltar is designed to work completely off the CD-ROM, with configuration data stored on a floppy disk. This is quite different from the common approach, where everything (program and configuration files) is stored on a hard disk. The more information is available at following link: -http://www.vianova.at/products/gibraltar/gibraltar.php?home 9.SmoothWall: SmoothWall is a specialized version of the Linux operating system that has been designed to provide a network with the functionality of a secure router and firewall. SmoothWall turns a PC (typically an older system that has since become outdated and unable to cope with the demands of today's modern software) into a dedicated firewall that will protect a private network of computers from the dangers that are posed by connecting it to the Internet. The more information is available at following link: -http://www.smoothwall.org/gpl/about/ 10.Astaro: Astaro security Linux is a firewall, which has features including stateful packet inspection, portscan detection, anti spoofing. It is not a complete open source solution; More information is available at following link: -http://www.astaro.com/products/index.htmlhttp://www.astaro.org/cgi/ultimate bb.cgi Can we discuss the security related features/issues of these distributions in the list ? Regards Deepak. -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Thu Nov 29 16:12:10 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:55191 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Thu, 29 Nov 2001 16:11:57 +0100 Received: with LISTAR (v1.0.0; list securedistros); Thu, 29 Nov 2001 16:11:32 +0100 (CET) Received: from perninha.conectiva.com.br ([IPv6:::ffff:200.250.58.156]:42762 "EHLO perninha.conectiva.com.br") by humbolt.nl.linux.org with ESMTP id ; Thu, 29 Nov 2001 16:11:20 +0100 Received: from burns.conectiva (burns.conectiva [10.0.0.4]) by perninha.conectiva.com.br (Postfix) with SMTP id ACA6B38C86 for ; Thu, 29 Nov 2001 12:11:18 -0300 (EST) Received: (qmail 20728 invoked by uid 0); 29 Nov 2001 15:08:06 -0000 Received: from pandora.distro.conectiva (10.0.17.30) by burns.conectiva with SMTP; 29 Nov 2001 15:08:06 -0000 Received: (from andreas@localhost) by pandora.distro.conectiva (8.11.6/8.11.6) id fATFBIF25066 for securedistros@nl.linux.org; Thu, 29 Nov 2001 13:11:18 -0200 Date: Thu, 29 Nov 2001 13:11:18 -0200 From: Andreas Hasenack To: securedistros@nl.linux.org Subject: Re: hello Message-ID: <20011129131118.B24229@conectiva.com.br> References: <3C0646F4.4080804@crdp.ac-caen.fr> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <3C0646F4.4080804@crdp.ac-caen.fr> User-Agent: Mutt/1.3.23i X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: andreas@conectiva.com.br Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org Em Thu, Nov 29, 2001 at 03:32:20PM +0100, Olivier � Oluve � le Monnier escreveu: > >Hm, I suppose this mailing list is quite dead .. > > Okay, let's make some noise : > > Which distro is � natively � the most secure ? flame bait! :) -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Thu Nov 29 16:17:01 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:57241 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Thu, 29 Nov 2001 16:16:49 +0100 Received: with LISTAR (v1.0.0; list securedistros); Thu, 29 Nov 2001 16:16:23 +0100 (CET) Received: from VaMelBox.crdp.ac-caen.fr ([IPv6:::ffff:193.49.64.43]:35346 "EHLO VaMelBox.crdp.ac-caen.fr") by humbolt.nl.linux.org with ESMTP id convert rfc822-to-8bit; Thu, 29 Nov 2001 16:16:10 +0100 Received: by VaMelBox.crdp.ac-caen.fr (Postfix, from userid 11) id 0859260F2; Thu, 29 Nov 2001 16:38:44 +0100 (CET) Received: from crdp.ac-caen.fr (unknown [193.49.66.6]) by VaMelBox.crdp.ac-caen.fr (Postfix) with ESMTP id 5076E1094 for ; Thu, 29 Nov 2001 15:38:43 +0000 (/etc/localtime) Message-ID: <3C065153.6000708@crdp.ac-caen.fr> Date: Thu, 29 Nov 2001 16:16:35 +0100 From: Olivier =?ISO-8859-1?Q?=AB?= Oluve =?ISO-8859-1?Q?=BB?= le Monnier Organization: Cellule TIC, CRDP de Basse-Normandie User-Agent: Mozilla/5.0 (X11; U; Linux i686; fr-FR; rv:0.9.4) Gecko/20011019 Netscape6/6.2 X-Accept-Language: fr-FR, en MIME-Version: 1.0 To: securedistros@nl.linux.org Subject: Re: hello References: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8BIT X-Virus-Scanned: by AMaViS perl-11 X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: olivier.le_monnier@crdp.ac-caen.fr Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org Deepak Kumar Gupta wrote: > In my opinion the question is quite abstract. The the need of security in > different domain is different, so abstractly you can not say which is most > secure distribution. [cut] > So i think we should talk about a specific domain, when we are talking about > the security. That's a pretty good analysis :) So, the question is : on which criterias (please excuse my poor english ;^) can we categorize the different kinds of linux installations. I would propose : - the level of disponibility and competence of the adminstrator ; - the number of users ; - the environment : other systems, firewall, ... > Regards > Deepak. -- ----> Olivier � Oluve � Le Monnier <---- - I n f o r m a t i c i e n l i b r e - -- Ing閚ierie 蒬ucative - CRDP-BN -- --- Debian GNU/Linux v2.2rev4 - Woody --- -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Thu Nov 29 16:28:16 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:1437 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Thu, 29 Nov 2001 16:28:08 +0100 Received: with LISTAR (v1.0.0; list securedistros); Thu, 29 Nov 2001 16:27:41 +0100 (CET) Received: from [IPv6:::ffff:202.54.110.230] ([IPv6:::ffff:202.54.110.230]:20494 "EHLO ngate.noida.hcltech.com") by humbolt.nl.linux.org with ESMTP id convert rfc822-to-8bit; Thu, 29 Nov 2001 16:27:22 +0100 Received: from exch-01.noida.hcltech.com (exch-01 [204.160.254.29]) by ngate.noida.hcltech.com (8.9.3/8.9.3) with ESMTP id UAA00690 for ; Thu, 29 Nov 2001 20:59:38 +0530 Received: by exch-01.noida.hcltech.com with Internet Mail Service (5.5.2653.19) id ; Thu, 29 Nov 2001 20:59:08 +0530 Message-ID: From: Deepak Kumar Gupta To: securedistros@nl.linux.org Subject: RE: hello Date: Thu, 29 Nov 2001 20:59:07 +0530 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8BIT X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: dkumar@noida.hcltech.com Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org > Deepak Kumar Gupta wrote: > > > In my opinion the question is quite abstract. The the need > of security in > > different domain is different, so abstractly you can not > say which is most > > secure distribution. > > [cut] > > > So i think we should talk about a specific domain, when we > are talking about > > the security. > > > That's a pretty good analysis :) So, the question is : on which > criterias (please excuse my poor english ;^) can we categorize the > different kinds of linux installations. I would propose : > > - the level of disponibility and competence of the adminstrator ; > - the number of users ; > - the environment : other systems, firewall, ... > I agree with you. I think we can also look at the listing of secure distributions available and can find more catagories from different point of views. I have provided the listing on mailing list. The initial study of these distros would be helpful. > > Regards > > Deepak. > > > -- > ----> Olivier � Oluve � Le Monnier <---- > - I n f o r m a t i c i e n l i b r e - > -- Ing閚ierie 蒬ucative - CRDP-BN -- > --- Debian GNU/Linux v2.2rev4 - Woody --- > > -- > Securedistros: A common list for all secured Linux distributions > Archive: http://mail.nl.linux.org/securedistros/ > -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Thu Nov 29 17:19:03 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:2468 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Thu, 29 Nov 2001 17:18:48 +0100 Received: with LISTAR (v1.0.0; list securedistros); Thu, 29 Nov 2001 17:17:55 +0100 (CET) Received: from apollo.wizard.ca ([IPv6:::ffff:204.244.205.22]:46097 "HELO apollo.wizard.ca") by humbolt.nl.linux.org with SMTP id convert rfc822-to-8bit; Thu, 29 Nov 2001 17:17:35 +0100 Received: (qmail 20488 invoked by uid 7791); 29 Nov 2001 16:17:08 -0000 Received: from mystery.wizard.ca (HELO mistress.wizard.ca) (204.244.205.8) by mail.wizard.ca with SMTP; 29 Nov 2001 16:17:08 -0000 Subject: Re: hello From: Michael Peddemors To: securedistros@nl.linux.org In-Reply-To: <3C0646F4.4080804@crdp.ac-caen.fr> References: <3C0646F4.4080804@crdp.ac-caen.fr> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8BIT X-Mailer: Evolution/0.13 (Preview Release) Date: 29 Nov 2001 08:23:34 -0800 Message-Id: <1007051014.20236.61.camel@mistress> Mime-Version: 1.0 X-AntiVirus: scanned for viruses by AMaViS 0.2.1 (http://amavis.org/) X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: michael@linuxmagic.com Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org Proably thin Linux Distros like our Firewall/VPN The more services you provide, the less secure it is.. When all you do is provide firewalling, only allow root to access the server from console, and boot the system from a write protected media.. When RedHat first started making large in roads into the market, it wasn't inherently less secure than Slackware, it just offered more 'services' Functionality vs Security is always a trade-off.. However, some distros come with the functionality, however it is turned off by default. This is always better. Also, the simpler the configuration scripts are, the easier it is to make sure that the correct security measures are in place. Every distro we face requires some amount of security tightening out of the box, but in our experience the slackware based distros tend to require less work to make sure that it is locked up. On Thu, 2001-11-29 at 06:32, Olivier � Oluve � le Monnier wrote: > > Hm, I suppose this mailing list is quite dead .. > > > Okay, let's make some noise : > > Which distro is � natively � the most secure ? > > -- "Catch the Magic of Linux..." -------------------------------------------------------- Michael Peddemors - Senior Consultant LinuxAdministration - Internet Services NetworkServices - Programming - Security Wizard IT Services http://www.wizard.ca Linux Support Specialist - http://www.linuxmagic.com -------------------------------------------------------- (604)589-0037 Beautiful British Columbia, Canada -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Thu Nov 29 19:11:16 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:30898 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Thu, 29 Nov 2001 19:11:03 +0100 Received: with LISTAR (v1.0.0; list securedistros); Thu, 29 Nov 2001 19:10:27 +0100 (CET) Received: from zok.SGI.COM ([IPv6:::ffff:204.94.215.101]:50866 "EHLO zok.sgi.com") by humbolt.nl.linux.org with ESMTP id ; Thu, 29 Nov 2001 19:10:21 +0100 Received: from cthulhu.engr.sgi.com (cthulhu.engr.sgi.com [192.26.80.2]) by zok.sgi.com (8.11.4/8.11.4/linux-outbound_gateway-1.1) with ESMTP id fATIAAA32032 for ; Thu, 29 Nov 2001 10:10:10 -0800 Received: from ishtar.corp.sgi.com (ishtar.corp.sgi.com [192.111.23.229]) by cthulhu.engr.sgi.com (SGI-8.9.3/8.9.3) with ESMTP id KAA22531 for ; Thu, 29 Nov 2001 10:10:09 -0800 (PST) Received: from sgi.com (tara.corp.sgi.com [192.111.23.228]) by ishtar.corp.sgi.com (8.11.6/8.11.6/SuSE Linux 0.5) with ESMTP id fATIA8T02893; Thu, 29 Nov 2001 10:10:08 -0800 Message-ID: <3C0679FE.1536ADD5@sgi.com> Date: Thu, 29 Nov 2001 10:10:06 -0800 From: L A Walsh Organization: Trust Technology, Core Linux, SGI X-Mailer: Mozilla 4.78 [en] (X11; U; Linux 2.4.14 i686) X-Accept-Language: en, en-US, en-GB, fr MIME-Version: 1.0 To: securedistros@nl.linux.org Subject: Re: hello References: <3C0646F4.4080804@crdp.ac-caen.fr> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: law@sgi.com Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org Not to be a party pooper. But if the list is dead, should it be continued? My last spam log showed the largest spamcount via uniq-froms were from this list. Is the list setup to accept submissions from subscribers only? Maybe it should be? Otherwise, there is very little traffic on the list except spam. I find myself questioning "do I really want to be subbed to a list who's largest poster is "spam". -linda -- - _ - _ - _ - _ - _ - _ - _ - L A Walsh, law at sgi dot com | Senior Engineer 01-650-933-5338 | Trust Technology, Core Linux, SGI -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Thu Nov 29 20:25:55 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:38587 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Thu, 29 Nov 2001 20:25:47 +0100 Received: with LISTAR (v1.0.0; list securedistros); Thu, 29 Nov 2001 20:25:17 +0100 (CET) Received: from freeside.ultraviolet.org ([IPv6:::ffff:192.215.175.10]:47367 "HELO ultraviolet.org") by humbolt.nl.linux.org with SMTP id ; Thu, 29 Nov 2001 20:25:00 +0100 Received: (qmail 19929 invoked by uid 500); 29 Nov 2001 20:24:50 -0000 Date: Thu, 29 Nov 2001 12:24:50 -0800 From: Tracy R Reed To: securedistros@nl.linux.org Subject: Re: The secure distribution listing Message-ID: <20011129122450.A19818@ultraviolet.org> References: Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="RnlQjJ0d97Da+TV1" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from dkumar@noida.hcltech.com on Thu, Nov 29, 2001 at 08:40:01PM +0530 X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: treed@ultraviolet.org Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org --RnlQjJ0d97Da+TV1 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Nov 29, 2001 at 08:40:01PM +0530, Deepak Kumar Gupta wrote: > I am giving the list of available secure distributions. The list can be a > useful information for discussing the security issues in these > distributions. After having been rooted via ssh (in-secure shell) recently I wouldn't consider any distro to be sure unless it implements some functionality like LIDS or SELinux. I have been playing with SELinux lately and I am very impressed. It is going on all of my important machines going forward. Simply having sane security defaults won't cut it anymore. Fortunately, a couple of the distros mentioned below utilize various implementations of the Linux capabilities system (LIDS etc.) --=20 Tracy Reed http://www.ultraviolet.org ``The lyf so short, the craft so long to lerne.'' - Chaucer --RnlQjJ0d97Da+TV1 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.1 (GNU/Linux) Comment: For info see http://www.gnupg.org iEYEARECAAYFAjwGmZIACgkQ9PIYKZYVAq1MPgCdGuX/BBaVjbHh6dlZp0Y14P2U yd4An32RKK2pbgmhhKHOjAOo771cud+t =F8EA -----END PGP SIGNATURE----- --RnlQjJ0d97Da+TV1-- -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Fri Nov 30 04:42:29 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:13441 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Fri, 30 Nov 2001 04:42:15 +0100 Received: with LISTAR (v1.0.0; list securedistros); Fri, 30 Nov 2001 04:41:21 +0100 (CET) Received: from [IPv6:::ffff:202.54.110.230] ([IPv6:::ffff:202.54.110.230]:56071 "EHLO ngate.noida.hcltech.com") by humbolt.nl.linux.org with ESMTP id ; Fri, 30 Nov 2001 04:41:07 +0100 Received: from exch-01.noida.hcltech.com (exch-01 [204.160.254.29]) by ngate.noida.hcltech.com (8.9.3/8.9.3) with ESMTP id JAA09233 for ; Fri, 30 Nov 2001 09:13:04 +0530 Received: by exch-01.noida.hcltech.com with Internet Mail Service (5.5.2653.19) id ; Fri, 30 Nov 2001 09:12:31 +0530 Message-ID: From: Deepak Kumar Gupta To: securedistros@nl.linux.org Subject: RE: The secure distribution listing Date: Fri, 30 Nov 2001 09:12:27 +0530 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain; charset="iso-8859-1" X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: dkumar@noida.hcltech.com Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org > On Thu, Nov 29, 2001 at 08:40:01PM +0530, Deepak Kumar Gupta wrote: > > I am giving the list of available secure distributions. The > list can be a > > useful information for discussing the security issues in these > > distributions. > > After having been rooted via ssh (in-secure shell) recently I wouldn't > consider any distro to be sure unless it implements some functionality > like LIDS or SELinux. I have been playing with SELinux lately and I am > very impressed. It is going on all of my important machines > going forward. > Simply having sane security defaults won't cut it anymore. > Fortunately, a > couple of the distros mentioned below utilize various > implementations of > the Linux capabilities system (LIDS etc.) > I have looked at SELinux by NSA and a example policy configuration by NAI Labs. The overall stuff is quite impressive. I am agree with the fact that no distro can be secure for sure untill it secures the kernel (i mean uses the security patches for kernel like LIDS and MAC etc). Some of distros like Engarde and Kaladix etc. include these features also. Can we list the essential/desired security features in a secure distro ?? The first one is as given by Tracy: Secure distro must have secure kernel patches like LIDS, MAC etc. (although the essential kernel security feature listing is also too long). > -- > Tracy Reed http://www.ultraviolet.org > ``The lyf so short, the craft so long to lerne.'' - Chaucer > -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Fri Nov 30 04:49:51 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:39299 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Fri, 30 Nov 2001 04:49:38 +0100 Received: with LISTAR (v1.0.0; list securedistros); Fri, 30 Nov 2001 04:49:13 +0100 (CET) Received: from [IPv6:::ffff:202.54.110.230] ([IPv6:::ffff:202.54.110.230]:27400 "EHLO ngate.noida.hcltech.com") by humbolt.nl.linux.org with ESMTP id ; Fri, 30 Nov 2001 04:49:06 +0100 Received: from exch-01.noida.hcltech.com (exch-01 [204.160.254.29]) by ngate.noida.hcltech.com (8.9.3/8.9.3) with ESMTP id JAA09434 for ; Fri, 30 Nov 2001 09:21:06 +0530 Received: by exch-01.noida.hcltech.com with Internet Mail Service (5.5.2653.19) id ; Fri, 30 Nov 2001 09:20:33 +0530 Message-ID: From: Deepak Kumar Gupta To: securedistros@nl.linux.org Subject: RE: hello Date: Fri, 30 Nov 2001 09:20:26 +0530 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain; charset="iso-8859-1" X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: dkumar@noida.hcltech.com Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org > Proably thin Linux Distros like our Firewall/VPN > The more services you provide, the less secure it is.. When > all you do > is provide firewalling, only allow root to access the server from > console, and boot the system from a write protected media.. > When RedHat first started making large in roads into the market, it > wasn't inherently less secure than Slackware, it just offered more > 'services' > > Functionality vs Security is always a trade-off.. quit true. and also performance vs security is a trade-off.. > However, some distros come with the functionality, however it > is turned > off by default. This is always better. Also, the simpler the > configuration scripts are, the easier it is to make sure that the > correct security measures are in place. Every distro we face requires > some amount of security tightening out of the box, but in our > experience > the slackware based distros tend to require less work to make > sure that > it is locked up. > for redhat and mandrake distribution a security harden script named Bastille is there. It is quite useful for hardening the security. > Michael Peddemors - Senior Consultant > LinuxAdministration - Internet Services > NetworkServices - Programming - Security > Wizard IT Services http://www.wizard.ca > Linux Support Specialist - http://www.linuxmagic.com > -------------------------------------------------------- > (604)589-0037 Beautiful British Columbia, Canada > > -- > Securedistros: A common list for all secured Linux distributions > Archive: http://mail.nl.linux.org/securedistros/ > -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Fri Nov 30 07:40:27 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:32143 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Fri, 30 Nov 2001 07:40:20 +0100 Received: with LISTAR (v1.0.0; list securedistros); Fri, 30 Nov 2001 07:39:48 +0100 (CET) Received: from [IPv6:::ffff:202.98.160.42] ([IPv6:::ffff:202.98.160.42]:56481 "HELO public.km.yn.cn") by humbolt.nl.linux.org with SMTP id ; Fri, 30 Nov 2001 07:39:38 +0100 Received: from public.km.yn.cn([218.20.60.145]) by public.km.yn.cn(JetMail 2.5.3.0) with SMTP id jm1b3c076096; Fri, 30 Nov 2001 06:22:12 -0000 Message-Id: Date: Fri, 30 Nov 2001 11:39:55 +0800 (CST) To: "chentian@263.net" From: =?ISO-8859-1?Q?net114 (=CD=F8=C2=E7114) ?= <11cn@163.com> Subject: =?GB2312?Q?net114(=CD=F8=C2=E7114)?= Organization: =?GB2312?Q?net114(=CD=F8=C2=E7114)?= X-mailer: Trade-Navigator 5.5 [CN] X-Priority: 2 Mime-Version: 1.0 Content-Type: text/html; charset="GB2312" Content-Transfer-Encoding: base64 X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: 11cn@163.com Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org PGh0bWw+DQo8aGVhZD4NCjx0aXRsZT5ORVQxMTQ8L3RpdGxlPg0KPG1ldGEg aHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjdGVudD0idGV4dC9odG1sOyBj aGFyc2V0PWdiMjMxMiI+DQo8c3R5bGUgdHlwZT0idGV4dC9jc3MiPg0KPCEt LQ0KdGQsYm9keSxpbnB1dCxzZWxlY3R7Zm9udC1zaXplOjlwdH0NCkE6bGlu a3s7VEVYVC1ERUNPUkFUSTpuZX0NCkE6dmlzaXRlZHs7VEVYVC1ERUNPUkFU STpuZX0NCkE6aG92ZXJ7O1RFWFQtREVDT1JBVEk6bmV9DQotLT4NCjwvc3R5 bGU+DQo8L2hlYWQ+DQoNCjxib2R5Pg0KDQo8dGFibGUgd2lkdGg9IjY0MCIg Ym9yZGVyPSIwIiBjZWxsc3BhY2luZz0iMCIgY2VsbHBhZGRpbmc9IjAiIGhl aWdodD0iMjM3Ij4NCiAgPHRyPiANCiAgICA8dGQgcm93c3Bhbj0iNSIgd2lk dGg9IjEiIGJnY29sb3I9IiMwMDAwMDAiPjwvdGQ+DQogICAgPHRkIGJnY29s b3I9IiMwMDAwMDAiIGhlaWdodD0iNyI+PC90ZD4NCiAgICA8dGQgcm93c3Bh bj0iNSIgd2lkdGg9IjEiIGJnY29sb3I9IiMwMDAwMDAiPjwvdGQ+DQogIDwv dHI+DQogIDx0cj4gDQogICAgPHRkIGhlaWdodD0iMjAiIGJnY29sb3I9IiM2 NjY2Y2MiIHZhbGlnbj0ibWlkZGxlIiBhbGlnbj0ibGVmdCI+IA0KICAgICAg PHRhYmxlIGJvcmRlcj0iMCIgY2VsbHNwYWNpbmc9IjAiIGNlbGxwYWRkaW5n PSIwIiB3aWR0aD0iOTglIj4NCiAgICAgICAgPHRyIGFsaWduPSJjZW50ZXIi PiANCiAgICAgICAgICA8dGQ+PGEgaHJlZj0iaHR0cDovL3d3dy5uZXQxMTQu Y2MvZGVuZ2ppLmh0bWwiIHRhcmdldD0iX2JsYW5rIj48Zm9udCBjb2xvcj0i I0ZGRkZGRiI+xvPStS+7+rm50MXPorXHvMc8L2ZvbnQ+PC9hPjwvdGQ+DQog ICAgICAgICAgPHRkIHdpZHRoPSI4MCI+PGEgaHJlZj0iaHR0cDovL3d3dy5u ZXQxMTQuY2MvbWFpbi5odG1sIiB0YXJnZXQ9Il9ibGFuayI+PGZvbnQgY29s b3I9IiNGRkZGRkYiPtDFz6LL0cv3PC9mb250PjwvYT48L3RkPg0KICAgICAg ICAgIDx0ZCB3aWR0aD0iODAiPjxhIGhyZWY9Imh0dHA6Ly93d3cubmV0MTE0 LmNjL3hpdWdhaS8iIHRhcmdldD0iX2JsYW5rIj48Zm9udCBjb2xvcj0iI0ZG RkZGRiI+0MXPotDeuMQ8L2ZvbnQ+PC9hPjwvdGQ+DQogICAgICAgICAgPHRk IHdpZHRoPSI4MCI+PGEgaHJlZj0iaHR0cDovL3d3dy5uZXQxMTQuY2MvcmVs YXRpb24vY2FsbG1lLmh0bWwiIHRhcmdldD0iX2JsYW5rIj48Zm9udCBjb2xv cj0iI0ZGRkZGRiI+udjT2rG+1b48L2ZvbnQ+PC9hPjwvdGQ+DQogICAgICAg ICAgPHRkIHdpZHRoPSI4MCI+PGEgaHJlZj0iaHR0cDovL3d3dy5uZXQxMTQu Y2MvcmVsYXRpb24vTmV3VXNlci5odG1sIiB0YXJnZXQ9Il9ibGFuayI+PGZv bnQgY29sb3I9IiNGRkZGRkYiPtDCytbJz8K3PC9mb250PjwvYT48L3RkPg0K ICAgICAgICAgIDx0ZCB3aWR0aD0iODAiPjxhIGhyZWY9Imh0dHA6Ly93d3cu bmV0MTE0LmNjL1Byb3h5QXJlYS5odG1sIiB0YXJnZXQ9Il9ibGFuayI+PGZv bnQgY29sb3I9IiNGRkZGRkYiPrT6wO3XqMf4PC9mb250PjwvYT48L3RkPg0K ICAgICAgICAgIDx0ZCB3aWR0aD0iODAiPjxhIGhyZWY9Imh0dHA6Ly93d3cu bmV0MTE0LmNjL1Byb2R1Y3RBcmVhLmh0bWwiIHRhcmdldD0iX2JsYW5rIj48 Zm9udCBjb2xvcj0iI0ZGRkZGRiI+svrGt8zYx/g8L2ZvbnQ+PC9hPiANCiAg ICAgICAgICA8L3RkPg0KICAgICAgICA8L3RyPg0KICAgICAgPC90YWJsZT4N CiAgICA8L3RkPg0KICA8L3RyPg0KICA8dHI+IA0KICAgIDx0ZCBoZWlnaHQ9 IjEiIGJnY29sb3I9IiMwMDAwMDAiPjwvdGQ+DQogIDwvdHI+DQogIDx0cj4g DQogICAgPHRkPiANCiAgICAgIDx0YWJsZSB3aWR0aD0iMTAwJSIgYm9yZGVy PSIwIiBjZWxsc3BhY2luZz0iMCIgY2VsbHBhZGRpbmc9IjAiPg0KICAgICAg ICA8dHI+IA0KICAgICAgICAgIDx0ZCBhbGlnbj0ibGVmdCIgd2lkdGg9IjIx NSI+PGltZyBzcmM9Imh0dHA6Ly93d3cuZWFjaG1heC5jb20vaW1hZ2UvbmV0 MTE0LTEuanBnIiB3aWR0aD0iMTQ0IiBoZWlnaHQ9IjE5NyI+PC90ZD4NCiAg ICAgICAgICA8dGQ+xvPKwtK1taXOu7v5sb7XytG2xr3MqKO7PGJyPg0KICAg ICAgICAgICAgPGJyPg0KICAgICAgICAgICAgt72x49DeuMSy6dGvo7s8YnI+ DQogICAgICAgICAgICA8YnI+DQogICAgICAgICAgICC7+bG+0MXPosPit9HC vMjro7s8YnI+DQogICAgICAgICAgICA8YnI+DQogICAgICAgICAgICDX7rXN ueO45rfR1+7T0NCntcTQ+7Srt73KvaO7PGJyPg0KICAgICAgICAgICAgPGJy Pg0KICAgICAgICAgICAgxOPTw7n9MTE0wvCjv8Tj1Nqyu77DtcS9q8C0u+HA 67K7v6o8YSBocmVmPSJodHRwOi8vd3d3Lm5ldDExNC5jYyIgdGFyZ2V0PSJf YmxhbmsiPk5FVDExNDwvYT48L3RkPg0KICAgICAgICAgIDx0ZCB3aWR0aD0i MTMyIiB2YWxpZ249ImJvdHRvbSI+PGEgaHJlZj0iaHR0cDovL3d3dy5uZXQx MTQuY2MiIHRhcmdldD0iX2JsYW5rIj48aW1nIHNyYz0iaHR0cDovL3d3dy5l YWNobWF4LmNvbS9pbWFnZS8xMTRsb2dvMS5naWYiIHdpZHRoPSIxMzIiIGhl aWdodD0iNDYiIGJvcmRlcj0iMCI+PC9hPjwvdGQ+DQogICAgICAgIDwvdHI+ DQogICAgICA8L3RhYmxlPg0KICAgIDwvdGQ+DQogIDwvdHI+DQogIDx0cj4g DQogICAgPHRkIGJnY29sb3I9IiMwMDAwMDAiIGhlaWdodD0iMSI+PC90ZD4N CiAgPC90cj4NCjwvdGFibGU+DQoNCjwvYm9keT48L2h0bWw+DQo= -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/ From securedistros-bounce@nl.linux.org Fri Nov 30 19:25:43 2001 Received: from localhost.nl.linux.org ([IPv6:::ffff:127.0.0.1]:58307 "EHLO humbolt.") by humbolt.nl.linux.org with ESMTP id ; Fri, 30 Nov 2001 19:25:36 +0100 Received: with LISTAR (v1.0.0; list securedistros); Fri, 30 Nov 2001 19:24:33 +0100 (CET) Received: from episec.com ([IPv6:::ffff:66.89.178.186]:12427 "HELO episec.com") by humbolt.nl.linux.org with SMTP id ; Fri, 30 Nov 2001 19:24:11 +0100 Received: (qmail 8464 invoked by uid 1000); 30 Nov 2001 17:19:54 -0000 Date: Fri, 30 Nov 2001 12:19:54 -0500 From: ari To: securedistros@nl.linux.org Subject: Re: The secure distribution listing Message-ID: <20011130121954.A8435@episec.com> Mail-Followup-To: ari , securedistros@nl.linux.org References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from dkumar@noida.hcltech.com, To securedistros@nl.linux.org X-listar-version: Listar v1.0.0 Sender: securedistros-bounce@nl.linux.org Errors-to: securedistros-bounce@nl.linux.org X-original-sender: edelkind-securedistros@episec.com Precedence: bulk Reply-to: securedistros@nl.linux.org List-help: List-unsubscribe: List-software: Listar version 1.0.0 X-List-ID: List-subscribe: List-owner: List-post: List-archive: X-list: securedistros Return-Path: X-Envelope-To: <"| /bin/marchive -a -m -f /home/majordomo/public_html/securedistros/folders/securedistros"> (uid 0) X-Orcpt: rfc822;securedistros-archive@nl.linux.org Original-Recipient: rfc822;securedistros-archive@nl.linux.org dkumar@noida.hcltech.com said this stuff: [...] > I have looked at SELinux by NSA and a example policy configuration by NAI > Labs. The overall stuff is quite impressive. I am agree with the fact that > no distro can be secure for sure untill it secures the kernel (i mean uses > the security patches for kernel like LIDS and MAC etc). Some of distros like > Engarde and Kaladix etc. include these features also. Can we list the > essential/desired security features in a secure distro ?? I began a document some time ago with this very purpose in mind -- to list the _minimum_ security requirements for general unix-related distributions. It can be found at: http://www.episec.com/documents/sdg/unix-sdg.html I wrote the information listed there in a couple of hours, and it is far from complete. Unfortunately, i haven't had the freedom to work on it in the past number of months. I welcome criticism and contributions. In the future, i hope to turn this into a whitepaper; all contributors will be credited. To ease discussion, relevant replies should ideally be sent to the list. ari [...] -- .----------------------------- ari ------------------------------. Chief of Technical Operations edelkind[at]episec.com Epi Security Industries [Episec, Inc.] New York, NY [USA] www.episec.com `-------------- internet security for the paranoid --------------' -- Securedistros: A common list for all secured Linux distributions Archive: http://mail.nl.linux.org/securedistros/