Slashdot Mirror


Trusted Debian v1.0 Released

Peter Busser writes "The Trusted Debian project releases its first official release, v1.0. Its main focus is solving most (but unlikely all) buffer overflow problems. It features PaX, a kernel patch which does several things. It tries to keep code and data apart, it randomizes stack, code, heap and shared libraries, it does strict mprotect() checking and it also protects the kernel. Trusted Debian also uses the stack protector patch for GCC developed by Hiroaki Etoh at IBM, which adds overflow checks to C/C++ code. It also features FreeS/WAN and RSBAC, an extensive access control framework. More information is available from the website. There is also a demonstration available for the special capabilities of this release."

9 of 259 comments (clear)

  1. No Remote... by strateego · · Score: 5, Funny

    No remote holes in three minutes will be the new slogan of the Secure Debian project.

    This must be a new linux record. :P

  2. anti-trustworthy by ih8apple · · Score: 3, Funny

    Now that Debian is "Trusted" (like everyone else in the freaking industry picking up the same buzzword), it's time to remember Anti-Trustworthy Computing.

  3. More out of date by Anonymous Coward · · Score: 5, Funny

    Now it is more secure than Debain Stable and more out-of-date.

  4. Why is it... by flacco · · Score: 5, Funny

    ...that i never trust any product that has the word "trust" in it?

    --
    pr0n - keeping monitor glass spotless since 1981.
  5. Re:Yet when MS talks about "trusted" computing... by kraksmoka · · Score: 3, Funny
    at least when the developers name it "trusted"-whatever it is- they mean that the user can trust it, not only the developer.

    when m$ talks about trusted, it is a truly Orwellian example of doublespeak.

    --
    "You never want a serious crisis to go to waste." - Rahm Emanuel
  6. Trusted? by Anonymous Coward · · Score: 4, Funny

    Trusted sounds past tense. Almost like Debian was trusted at one point, but not anymore; that doesn't do much to instill confidence does it?. I propose a name change to "Trusting" Debian, as it sounds much nicer. Better still, we should drop the word Debian (how many people know what a Debian is anyhow?) and just go with the generic word "Computer". Now it's "Trusting Computer". See how that works?

    Everyone likes a trusting computer.

  7. Will this help prevent duplicates at Slashdot? by linuxbaby · · Score: 4, Funny

    On a normal Linux system running Slashdot, we see this:

    • Article #3 Posted again
    • Article #4 Posted
    • Article #2 Posted again
    • Article #1 Posted again
    • Article #3 Posted
    • Article #2 Posted
    • Article #1 Posted

    On a Slashdot running one of the Trusted Debian kernels, you will see something like this:

    • Article #4 Posted
    • Article #3 Posted
    • Article #2 Posted
    • Article #1 Posted

    As you can see every value is different.

  8. Re:It depends by Anonymous Coward · · Score: 1, Funny
    Let's look at this case: did Laci get to choose?

    No, but Scott got to choose...

  9. Re:trusted according to WHO? by sydb · · Score: 2, Funny

    'C' levels are nowhere close to 'B' levels.

    For 'B' you have to pull the power out too. 'A' requires metalworking skills.

    --
    Yours Sincerely, Michael.