Slashdot Mirror

Forbidden

You don't have permission to access /installation/index.php on this server.
Apache/2.0.55 (Trustix Secure Linux/Linux) PHP/4.4.2 Server at www.trustix.net Port 80

WOW! Now that is secure.

At least you can reach this site, which looks awfully commercial-style with no community.

Forbidden

You don't have permission to access /installation/index.php on this server.
Apache/2.0.55 (Trustix Secure Linux/Linux) PHP/4.4.2 Server at www.trustix.net Port 80

WOW! Now that is secure.

At least you can reach this site, which looks awfully commercial-style with no community.

trustix.org

Probably not a security-related problem, but what an inopportune time to get slashdotted (via the article link anyway), unless the article linked to has the wrong address :)

Trustix Secure Linux has been one of the most secure distributions since its inception. No services are on by default and only a minimal install is needed most of the time. Updates come out seemingly hourly (more like daily) and it's one of the smoothest and securest server operating systems out there. If you're looking for desktop, you're not going to find it with Trustix. I've been using it as my main server distribution for ~3 years without a single problem.

I'm using http://www.trustix.org/ TLS for a few different things, seems as stable as anything else around on cheap hardware. I have no idea about its 'goodness' value, but for me it is good. To my knowledge it has not been compromised.

As opposed to Slackware, Gentoo, Debian, Trustix, Tiny Sofa etc. These are designed for making toast. Why they have everything required for an out-of-the-box LAMP installation is beyond me, I've never had to use PHP to make toast before. Maybe my toaster just has it integrated in firmware?

It seems to be a common misconception that you have to compile open source software manually, and that you have to be a skilled 1337 programmer to do it.

Ever heard of rpm? apt-get? swup?

RedHat offers a complete server, just burn the ISOs and install. If you think that's too difficult, then fine. It's your money.

*cough*cough*cough*cough*cough*cough*cough*

Sorry, I got a bad cold.

• Use qmail or postfix instead of Sendamil.
• Make sure you have all security patches for your system installed. Redhat users, for example, can find those patches here.
• Linux users can read Linux weekly news for security updates.
• Manage your SUIDs. Make sure you keep a close eye on all your suids. For example, I use this script to put all my suid in the directory /suid/bin:

  #!/bin/sh
  
  find / -type f -perm +6000 > /root/suids
  
  for a in `cat /root/suids` ; do
  

  mv $a /suid/bin
  ln -s /suid/bin/`echo $a | awk -F/ '{print $NF}'` $a
  

  
  done
  
• Obviously, turn off all unneeded network services in /etc/inetd.conf and (usually) /etc/rc.d/rc3.d. You can see what services are running on your machine with netstat -na.
• For a UNIX that is free and (hopefully) secure out of the box, check out OpenBSD or Trustix.

- Sam