Linked by Igor Ljubuncic on Mon 21st Jun 2010 09:35 UTC
Thread beginning with comment 430886
To read all comments associated with this story, please click here.
To read all comments associated with this story, please click here.
Back in college, the course on Operating Systems had this to say on Linux security:
"Linux is both the least and most secure OS there is. It all depends on how much time and effort the admin puts in to properly configuring it."
"Linux is both the least and most secure OS there is. It all depends on how much time and effort the admin puts in to properly configuring it."
Well that's not really true as, generally speaking, Linux distros ship with more secure defaults than Windows does.
However, it is fair to say that no OS is secure if you stick an experienced idiot in front of it. i.e. the kind of users who are experienced enough to know how to do stuff but not smart enough to know they shouldn't do it. (unfortunately I think we've all met at least one of these guys and I'm sure a few of you guys has made a living out of fixing their computers)
Well that's not really true as, generally speaking, Linux distros ship with more secure defaults than Windows does.
And may I remind people that Linux security features are not even turned up to full blast on default installations. It's this good out of the box but it's not even trying. There's room for increasing Linux security two-fold or more. Consider:
* mandatory AppArmor-based software whitelisting;
* mandatory separate /home and /tmp partitions with noexec,nodev,nosuid;
* restricting software installation to official repositories and their mirrors and denying direct install of debs/rpms/install kits by default;
* integrating and shipping default kernels that feature better ASLR and NX bit support.





Member since:
2010-02-24
Back in college, the course on Operating Systems had this to say on Linux security:
"Linux is both the least and most secure OS there is. It all depends on how much time and effort the admin puts in to properly configuring it."