Slashdot Mirror

← Back to Stories (view on slashdot.org)

HP-LX 1.0 Secure Linux

Posted by michael on from the thirty-percent-fewer-rootkits dept.

kengreenebaum writes: "Webtechniques has a short but interesting article on HP's approach to a secure but expensive LINUX distro. Basically they started with RedHat 7.1 and added compartments; an extension to the age-old chroot jail concept where the processes representing major services run. Kernel extensions allow HP (or the administrator) to specify which compartments can access which kernel resources including individual files, network stacks, and each other. HP has Technical Product Brief as well as other material online. Interesting to compare HP's approach to that of the NSA's Secure Linux projects. These concepts sound like a solid way to prevent buffer overflow type security holes in individual services from compromising the entire machine. At $3000 HP-LX is too expensive for many to experiment with but the NSA's code seems to be more readily available. Anybody have experience with these distributions or with similar approaches to Linux security?"

5 of 182 comments (clear)

  1. WARNING JAVASCRIPT ATTACK AFTER THE "b&" by Anonymous Coward · · Score: -1, Troll

    b& gets through slashdot filters! This guy is running a javascript exploit that is damaging for unpatched IE 4.x versions. Mod this script kiddie down now!!

  2. ### FRIIST PEESOT! ### by Anonymous Coward · · Score: -1, Troll

    First Post, Bitches!

    Yeeeeeeee-ha!

  3. New Poll by Anonymous Coward · · Score: -1, Troll

    Which of michael's body parts emanates the most offensive stench?

    1. Feet
    2. Genitalia
    3. Buttocks

  4. Re:As I have said before... by omega9 · · Score: 4, Troll

    Either post links, facts, or other references, or don't expect anyone to listen to you.

    And I especially don't care for users who think they've got clout just because they have a low UID. Remember, if you win a race in the special olympics you may have first place, but you're still retarded.

    --
    I'm against picketing, but I don't know how to show it.
  5. this is bullshit by Anonymous Coward · · Score: -1, Troll

    WHY are hp trying to sell this as anything new? this is all old unix hat that worked perfectly well under hp ux now rebranded for idiot managers to jump on the linux bandwagon.