EnGarde Secure Linux v2 Out

← Back to Stories (view on slashdot.org)

Posted by Hemos on Monday May 26, 2003 @02:23AM from the lock-it-down dept.

Chuck writes "I came across EnGarde Secure Linux about two years ago when it was first released, and I see they just released the newest version. Improved Mandatory Access Control using LIDS, awesome web-based manager, code from the Openwall Project and winner of the Network Computing Hardened Linux product of the year. I love EnGarde."

16 of 70 comments (clear)

Min score:

Reason:

Sort:

Commercial? by Anonymous Coward · 2003-05-26 02:25 · Score: 4, Interesting

I thoght EnGarde was strictly commercial nowadays?? No?
Advertising shmadvertising... by CoolVibe · 2003-05-26 02:26 · Score: 3, Interesting

Guess this is one of those slashdot sponsored "advertisement" advertising stories huh?
Anyway, LIDS is great. Played with it, and deemed it cool. Now I wish FreeBSD had something that cool (since that's my main OS of choice), but LOMAC comes pretty close.
Heck, I just might give this a whirl on one of my testboxes...
1. Re:Advertising shmadvertising... by DASHSL0T · 2003-05-26 02:32 · Score: 4, Funny
  
  Heck, I just might give this a whirl on one of my testboxes...
  
  So, the advertising worked, is what you're saying. :-D
  
  --
  Have you taken the SCO poll?
  Linux-Universe
  
  --
  Freedom Is Universal
  Linux-Universe
2. Re:Advertising shmadvertising... by caluml · 2003-05-26 03:31 · Score: 3, Interesting
  
  I prefer the GRSecurity patches to LIDS. They contain a lot more than just ACLs.
  
  --
  Get your own free personal location tracker
Alternatives by schroet · 2003-05-26 02:27 · Score: 5, Informative

We like Astaro a lot.

http://www.astaro.de/php/statics.php?action=asl& la ng=gb

Could anyone compare the 2?
1. Re:Alternatives by warez · 2003-05-26 04:35 · Score: 5, Informative
  
  Astaro is a hybrid firewall (stateful packet filter, application proxy), with a bunch of other nifty features. I 'discovered' it a couple of months ago on freshmeat when I was about to put together my own security box. After playing with it, I am nothing short of impressed, and its FREE for home use. it is a refined product. Engarde is a hardened linux distro; it's most practical use is turning it into a secure pubic server. The two actually goes hand in hand, as they aren't competing products.
"I love EnGarde." by MacOS_Rules · 2003-05-26 02:27 · Score: 5, Funny

Quoth the poster: "I love EnGarde."

The best part: it automatically uses protection! Just don't try a backdoor!

---OWWW! Stop hitting me!---

--
If a man's character is to be abused there's nobody like a relative to do the business. -Thackeray, William
No skills required? by IO+ERROR · 2003-05-26 02:31 · Score: 4, Funny

No Linux administration skills required.

HUH? This is supposed to be an uber-secure system and you don't have to administer it? Somebody explain this to me like I'm a two year old, because I just don't get it.

--
How am I supposed to fit a pithy, relevant quote into 120 characters?
1. Re:No skills required? by questamor · 2003-05-26 02:51 · Score: 4, Funny
  
  All ports are turned off by default, with no way to turn them on. Also, networking hasn't been compiled into the kernel.
  
  Not only that, no users are allowed. not even root.
  
  It's supplied preinstalled on a PC with no powerswitch. hell, no PSU even.
  
  They think of everything...
Re:Something Different by 3.5+stripes · 2003-05-26 02:44 · Score: 3, Informative

Have a look at e-smith

http://www.e-smith.org

--

He tried to kill me with a forklift!
Distro Consolidation by The+Monster · 2003-05-26 02:51 · Score: 5, Informative

wouldn't it be more competitve to merge certain distros?
They tried that. It's called UnitedLinux. And one of the partners in that enterprise has decided to serially sue everyone else in the Linux business, based on an exotic theory of IP violation. You may have seen something about this recently here on Slashdot

--

[100% ISO 646 Compliant]
SVM, ERGO MONSTRO.
Re:We were considering implementing it by RedOregon · 2003-05-26 02:53 · Score: 4, Insightful

What? You decided not to implement because it requires you to configure it? And if you don't, it gives a benign error?

(Link points at an advisory stating that log check emails will bounce by default if not configured)

--
Skivvy Niner? Email me!
HEY! Look left just ONE MORE TIME!
Braino by wowbagger · 2003-05-26 02:53 · Score: 3, Funny

While reading the summary, I misread

Openwall Project

as

Orwell Project

which, I personally feel would be an interesting name for a security enhancing project - right up there with Big Brother.

ENOCAFFINE

--
www.eFax.com are spammers
Re:We were considering implementing it by freuddot · 2003-05-26 02:59 · Score: 4, Informative

OVERVIEW
--------
A bug was recently discovered in the default configuration of the
daily log summaries. The default address is set incorrectly causing
daily summaries to bounce until the system is ran through the initial
configuration process or the admin e-mail address is changed.

Err. That's probably the mildest bug/security problem I've ever seen. Care to explain me what is the problem of either

- applying the update ?
- running the initial configuration process ?

Or were you simply googling for a defect to post and that's the ony one you found ?
Pricing. by Qbertino · 2003-05-26 03:45 · Score: 4, Interesting

What's this supposed to be?
Is this such a big fat hairy deal that you have to charge a minimum of 800$ for a "oh-so-extra-special-secure-Linux" distro?
Ok, if it's so easy to install that any Webdesigner could get it on right out of the box I say ok, let them Dreamweavers pay the price if they're to cheap for hiring a sysadmin to their team.
But I seriously doupt that this one pulls the trick better than a securepatched SuSE, Debian or OpenBSD.
Does anybody have solid expierience with this distro and can they testify that its bizar retail price is justified?

--
We suffer more in our imagination than in reality. - Seneca
What a great idea by The+Tyro · 2003-05-26 05:36 · Score: 4, Funny

"turning it into a secure pubic server"

That's truly a noble endeavor... From my experience, most insecure pubic servers are loaded with viruses and trojans.

--
Even if a man chops off your hand with a sword, you still have two nice, sharp bones to stick in his eyes.