Most Secure Distribution of Linux?

[Stabilityonitsown]

I am looking for a linux distro that is EXTREMELY secure, so secure even the worlds smartest hacker wouldn't be able to punch a hole through it. What do you guys recommend? BTW I am not switching my main computer I am switching another computer's oS

[vishzilla]

Linux in general is very secure. Each distro will have their own sets of applications for security, you won't find much difference at all. Ubuntu is secure. For reference read this article (http://www.theregister.co.uk/2008/03/29/ubuntu_left_standing/)

[Stabilityonitsown]

Linux in general is very secure. Each distro will have their own sets of applications for security, you won't find much difference at all. Ubuntu is secure. For reference read this article (http://www.theregister.co.uk/2008/03/29/ubuntu_left_standing/)
Err not Ubuntu lol sorryyy. Any other distro?

[vishzilla]

The other popular distros are
1. PCLinuxOS
2. Linux Mint
3. Dream Linux
4. OpenSuse
Everyone has their favorite, it hard to decide so you can see this website for further details http://distrowatch.com

[NightwishFan]

err not ubuntu lol srrrry try fedora perhaps?

[agim]

First of all, there is no such thing as an unhackable computer. Especially not off of a default install. If you want to make your computer safer, make sure you don't run as root unless you have to, keep up with the updates, and learn for yourself how to harden your system. Then you won't be stuck with a distro because someone on a forum told you it was safe.

And not that I think Ubuntu is the 'safest', but why the lol? Is there something about ubuntu that you know that makes it unsafe?

[vishzilla]

Yes, exactly. Security isn't foolproof in any form.

[tamoneya]

I realize that you asked for a linux distro but I think that in this case BSD is a suitable answer. while linux is very secure i dont believe it is as secure as BSD. The idea of BSD is security. Linux is more about open source and free software while BSD is built around and focused upon security.

As for ubuntu the developers are not focused upon security as much as other distros. They spend a larger percentage of time on things like compiz and the likes. Also the 6 month release cycle means that the releases are slightly more buggy than other distributions. As you can probably tell there is a group of users on the forums who are not very happy with the quality of the release since they have been having trouble. For each of these bugs they complain about I am sure there are also bugs related to security. If you compare ubuntu to debian (what ubuntu is based on) you will find that debian is more secure than ubuntu. They have a two year release cycle. This results in a more stable and secure OS.

[daimaru]

I am looking for a linux distro that is EXTREMELY secure, so secure even the worlds smartest hacker wouldn't be able to punch a hole through it. What do you guys recommend? BTW I am not switching my main computer I am switching another computer's oS

You can try the national security agency's Security-enhanced Linux (SELinux (http://www.nsa.gov/selinux/index.cfm)) (http://www.nsa.gov/selinux/index.cfm)
It is secure enough if you know enough to be able to configure it well enough for your needs.

But my guess is that your security needs will be satisfied if it's ok for the NSA, don't you:)?

[Stabilityonitsown]

You can try the national security agency's Security-enhanced Linux (SELinux (http://www.nsa.gov/selinux/index.cfm)) (http://www.nsa.gov/selinux/index.cfm)
It is secure enough if you know enough to be able to configure it well enough for your needs.

But my guess is that your security needs will be satisfied if it's ok for the NSA, don't you:)?I don't trust the government, they might plant some spying software in it and ill install it and they will be watching me.

First of all, there is no such thing as an unhackable computer. Especially not off of a default install. If you want to make your computer safer, make sure you don't run as root unless you have to, keep up with the updates, and learn for yourself how to harden your system. Then you won't be stuck with a distro because someone on a forum told you it was safe.

And not that I think Ubuntu is the 'safest', but why the lol? Is there something about ubuntu that you know that makes it unsafe?lol thats the stupidest thing I have ever heard. Have you ever heard of a computer with no internet? Edit:And BTW fyi I don't see how a distribution that has a release cycle of 6 months and is bloated with software that I don't even use safe.

[agim]

Before I start to think poorly of you, I need to know if you are older than 15. If not, then I understand your lack of understanding of both linux and the english language.

Also, if we are including the bsd's, then OpenBSD is supposedly the safest of the safe. And I assure you, it won't have a bunch of applications that you don't use.

Of course, if we are including computers not connected to the internet, then they are all safe. Unless the NSA sneaks into your room and does the spying/hacking from there.

[Monicker]

Of course, if we are including computers not connected to the internet, then they are all safe. Unless the NSA sneaks into your room and does the spying/hacking from there.


Unless he has Tempest shielding, they don't even need to go inside. ;)

[Stabilityonitsown]

What do we have here? A bunch of trolls? Go flame somewhere else I don't want to hear it.

[daimaru]

I don't trust the government, they might plant some spying software in it and ill install it and they will be watching me.

(SELinux has been integrated into version 2.6 series of the Linux kernel, and separate patches are now unnecessary)

Primarily developed by the US National Security Agency (http://en.wikipedia.org/wiki/National_Security_Agency), it was released to the open source (http://en.wikipedia.org/wiki/Open_source) development community on December 22 (http://en.wikipedia.org/wiki/December_22), 2000 (http://en.wikipedia.org/wiki/2000) and merged into the mainline kernel 2.6.0-test3, released on 8 August (http://en.wikipedia.org/wiki/August_8) 2003 (http://en.wikipedia.org/wiki/2003). Other significant contributors include Network Associates (http://en.wikipedia.org/wiki/Network_Associates), Secure Computing Corporation (http://en.wikipedia.org/wiki/Secure_Computing_Corporation), Trusted Computer Solutions (http://en.wikipedia.org/w/index.php?title=Trusted_Computer_Solutions&action=edit&redlink=1), and Tresys (http://en.wikipedia.org/w/index.php?title=Tresys&action=edit&redlink=1). Experimental ports of the FLASK (http://en.wikipedia.org/wiki/FLASK)/TE implementation have been made available via the TrustedBSD (http://en.wikipedia.org/wiki/FreeBSD#TrustedBSD) Project for the FreeBSD (http://en.wikipedia.org/wiki/FreeBSD) and Darwin (http://en.wikipedia.org/wiki/Darwin_%28operating_system%29) operating systems.

Guess they are already spying on you.... c'mon its open source and if they wanted to spy on you they would be already :)
EDIT: just so you don't think that I'm joining in on the flaming stuff. It really is the safest linux, go read up on it, its not even a distribution, but a bunch of security patches that, if configured right, help make your linux distribution safer. Hope this helps you. You can read up on it either on the nsa site or on wikipedia or just google it and get some info.

[Stabilityonitsown]

Nah,just think of it this way bro, me not getting SELinux just shows I trust you guys more than our actual government;).

[p_quarles]

Computer operating systems are inherently insecure. Some -- such as OpenBSD -- are more secure than others in the default configuration, but a user who doesn't understand system administration can turn that around very quickly.

Basically, stabilityonitsown, you are asking the wrong question. The better question would be "how do I configure a Linux distribution to be secure for a specific purpose?" Anyone telling you that distro X is unqualifiably more secure than distro Y is simply misleading you.

[Stabilityonitsown]

Computer operating systems are inherently insecure. Some -- such as OpenBSD -- are more secure than others in the default configuration, but a user who doesn't understand system administration can turn that around very quickly.

Basically, stabilityonitsown, you are asking the wrong question. The better question would be "how do I configure a Linux distribution to be secure for a specific purpose?" Anyone telling you that distro X is unqualifiably more secure than distro Y is simply misleading you.No, I am not looking for configurations, I am looking for a linux distribution that is the best in security.

Please do not recommend these distributions, and don't ask why I don't want you to recommend these distributions, as if I state my opinionated thought and some kid thinks otherwise he will start flaming, debating, and degrading me.


FreeBSD
SELinux
Ubuntu
OpenBSD

Not too hard is it:)

[NightwishFan]

I HIGHLY recommend these distros:
FreeBSD
SELinux
Ubuntu
OpenBSD


01001100011011110110111101110011011001010110111000 1000000111010101110000

[Stabilityonitsown]

I HIGHLY recommend these distros:
FreeBSD
SELinux
Ubuntu
OpenBSD


01001100011011110110111101110011011001010110111000 100000011101010111000000101110


:lolflag:

BTW for those who don't know his message in "binary" is "Loosen up"

[tamoneya]

well you are seriously limiting us and p_quarles does have a point. My next choice would probably be gentoo since it is all compliled from source or a hardened version of linux from scratch just because it is so basic and barebones. There just isnt room for security holes.

[Jammerdelray]

Fedora too.

[p_quarles]

No, I am not looking for configurations, I am looking for a linux distribution that is the best in security.

Please do not recommend these distributions, and don't ask why I don't want you to recommend these distributions, as if I state my opinionated thought and some kid thinks otherwise he will start flaming, debating, and degrading me.


FreeBSD
SELinux
Ubuntu
OpenBSD

Not too hard is it:)
There are no secure "distros," there are only secure configurations and secure procedures. You may not like the answer, but there you have it. Instead of dismissing answers you do not want to hear, I recommend that you undertake to educate yourself about how computer security actually works. This would mean, first of all, giving more consideration to the answers you have rejected. People are trying to help you, and it is rude to reject that help without making even a minimal effort to understand it.

[Stabilityonitsown]

Ok I just thought of some that might be good have a look
openSUSE
fedora
archlinux
Tell me what you think.

[agim]

+1

[NightwishFan]

The new Fedora makes a point of offering easy to configure/use security features, if thats what you are looking for go with Fedora.

[Stabilityonitsown]

And also fedora is built of Red Hat Linux. Red Hat Linux is aimed torwards security. So I think I might go with fedora.

[tamoneya]

p_quarles + 1
I couldnt have said it better myself

[Stabilityonitsown]

Thanks everyone for your help I really appreciate it! And sorry if I was mean or picky throughout the discussion!

[jmore9]

I have used almost all the big guys fedora, suse, mandriva, debian, and have found they are all pretty secure right out of the box. I am currently using ubuntu 7.10 and it has withstood a bunch of people trying to get in from VNC.smtp,ms-sqf-s attempts, etc. All blocked with the built in firewall. I don't think if i had been running windows i would have been so protected -- my own opinion --. But with all of them you can make them as secure or un-secure, as your hearts desire. Its what you want to do. I like ubuntu its easy to and keep updated.

[moonpup]

First off, understand the os you are going to use. Granted all os's can have bugs in the code and be hacked, but knowing how to configure it properly for security is the key here. The reason most systems get hacked is because either the sysadmin did not make use of the security tools the system provided, used weak passwords or simply configured something incorrectly.

If your looking for the most secure os, my money is on OpenBSD which has it's code routinely audited for security issues. Also, it's had "Only two remote holes in the default install, in more than 10 years!"

Bottom line, whatever os you decide on... learn how to secure it with the tools provided or add other tools to fill in the missing pieces.

[kevdog]

This entire thread is pointless. Read what p_quarles has written.