IPB

Welcome Guest ( Log In | Register )

Recommended
BootDisk.com

Active Users

 
Reply to this topicStart new topic
Security on Linux
Mikorist
post Sep 30 2008, 08:51 PM
Post #1


Advanced Member
***

Group: Advanced user
Posts: 246
Thank(s): 11
Joined: 2-September 06
From: Belgrade
Member No.: 306



I am not a security expert at all.

But NSA is..... (IMG:../forums/style_emoticons/default/heh.gif)

U.S. NSA recently released a security-enhanced version of Linux -- code and all -- to the open source community.


From NSA Security-enhanced Linux Team:

QUOTE
As part of its Information Assurance mission, the National Security Agency has long been involved with the computer security research community in investigating a wide range of computer security topics including operating system security. Recognizing the critical role of operating system security mechanisms in supporting security at higher levels, researchers from NSA's National Information Assurance Research Laboratory have been investigating an architecture that can provide the necessary security functionality in a manner that can meet the security needs of a wide range of computing environments.

End systems must be able to enforce the separation of information based on confidentiality and integrity requirements to provide system security. Operating system security mechanisms are the foundation for ensuring such separation. Unfortunately, existing mainstream operating systems lack the critical security feature required for enforcing separation: mandatory access control. As a consequence, application security mechanisms are vulnerable to tampering and bypass, and malicious or flawed applications can easily cause failures in system security.

The results of several previous research projects in this area have yielded a strong, flexible mandatory access control architecture called Flask. A reference implementation of this architecture was first integrated into a security-enhanced Linux® prototype system in order to demonstrate the value of flexible mandatory access controls and how such controls could be added to an operating system. The architecture has been subsequently mainstreamed into Linux and ported to several other systems, including the Solaris™ operating system, the FreeBSD® operating system, and the Darwin kernel, spawning a wide range of related work..



Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
FreeBSD® is a registered trademark of the FreeBSD Foundation.
Solaris™ is a trademark or registered trademark of Sun Microsystems, Inc. in the United States and other countries.


From:
Security-Enhanced Linux


(IMG:http://i75.photobucket.com/albums/i306/mikorist/PROJ24.gif)

Conclusion:

If NSA need a secure OS internally, and that is the Linux
we can take to be relatively secure in Linux as home desktop users.

Download

SELinux is now available in Hardy Heron.
See that page for installation instructions:

https://wiki.ubuntu.com/SELinux


(IMG:../forums/style_emoticons/default/thumbsup.gif)
Go to the top of the page
 
+Quote Post
Mikorist
post Oct 1 2008, 04:34 PM
Post #2


Advanced Member
***

Group: Advanced user
Posts: 246
Thank(s): 11
Joined: 2-September 06
From: Belgrade
Member No.: 306



Some of the top computer-scientists and
programmers in the world worked on SELinux ...

Security policy and enforcement are independent using SELinux.

(IMG:http://www.ibm.com/developerworks/linux/library/l-selinux/figure1.gif)

Look:
Anatomy of SELinux

... so they may know
something about Linux that most don't.

What is that knowledge?
Linux is the most secure operating system (OS) in World.


Does NSA/US government use Linux as their main operating system??

NSA collaborate with Linux...

NSA really want to help EVERYONE LINUX users with security?

We will never not know that for sure....

...but your tax dollars are paying for SELinux package!

P.S
The SELinux package is OPTIONAL, you don't have to install it.

(IMG:../forums/style_emoticons/default/cheers.gif)
Go to the top of the page
 
+Quote Post
sanbarrow
post Oct 1 2008, 06:19 PM
Post #3


Advanced Member
***

Group: Developer
Posts: 288
Thank(s): 11
Joined: 13-October 06
From: Germany - Sauerland
Member No.: 755



QUOTE
Linux is the most secure operating system (OS) in World.


what about OpenBSD ?
Go to the top of the page
 
+Quote Post
jaclaz
post Oct 1 2008, 06:48 PM
Post #4


Finder
***

Group: Advanced user
Posts: 2,907
Thank(s): 107
Joined: 14-July 06
Member No.: 2


Italy


The most secure OS in the world is ANY operating system on ANY machine NOT physically accessible by intruders and NOT connected to the internet.

FYI:
(interesting comparison and links to various BSD's) (IMG:../forums/style_emoticons/default/smile.gif)
http://www.linuxquestions.org/questions/bs...posting-177142/

jaclaz
Go to the top of the page
 
+Quote Post
Mikorist
post Oct 1 2008, 07:08 PM
Post #5


Advanced Member
***

Group: Advanced user
Posts: 246
Thank(s): 11
Joined: 2-September 06
From: Belgrade
Member No.: 306



QUOTE (sanbarrow @ Oct 1 2008, 07:19 PM) *
what about OpenBSD ?



My answer to this is in citation from NSA.


The most secure operating systems in World :

QUOTE
1. Linux® is a registered trademark of Linus Torvalds in the United States and other countries.

2. Solaris™ is a trademark or registered trademark of Sun Microsystems, Inc.

3.FreeBSD® is a registered trademark of the FreeBSD Foundation.

4.Darwin is operating system released by Apple Inc. in 2000.



This include all BSD & Unix OS Derivatives ...


(IMG:../forums/style_emoticons/default/cheers.gif)
Go to the top of the page
 
+Quote Post
Mikorist
post Oct 1 2008, 07:15 PM
Post #6


Advanced Member
***

Group: Advanced user
Posts: 246
Thank(s): 11
Joined: 2-September 06
From: Belgrade
Member No.: 306



QUOTE (jaclaz @ Oct 1 2008, 07:48 PM) *
The most secure OS in the world is ANY operating system on ANY machine NOT physically accessible by intruders and NOT connected to the internet.

jaclaz


This is really true !

(IMG:../forums/style_emoticons/default/wink.gif)
Go to the top of the page
 
+Quote Post
« Next Oldest · Linux and other OS flavours · Next Newest »
 

Fast ReplyReply to this topicStart new topic

 

Display Mode: Standard · Switch to: Linear+ · Switch to: Outline

Track this topic · Email this topic · Print this topic · Subscribe to this forum

RSS Lo-Fi Version Time is now: 3rd October 2008 - 07:46 PM
W3C XHTML • © 2008 Boot Land • All rights reserved • W3C CSS