Operating system based on safety

Here the alphabetical list of the operating systems not only recognized for their safety, but resulting from a project centered on the reinforcement of safety. The criteria are detailed and can also be indexed in the evaluated operating systems.

BSD

BSD (for Berkeley Software Distribution) is an operating system under a free license, the License BSD, from which are derived NetBSD, FreeBSD and OpenBSD in particular.

OpenBSD

OpenBSD is resulting from separation with NetBSD, oldest of the three other principal operating systems of the family of the BSD today in activity. It is a project Open source highly concerned by safety, it includes a certain number of security measures absent or optional in other operating systems, even with the detriment of the facility of use, speed or functionalities. Audits of codes considered as being important components of the safety of a system are carried out.

TrustedBSD

TrustedBSD is a surcouche of FreeBSD intended to accentuate safety. The project is made possible by subsidies coming from various organizations; it follows the common criteria for the evaluation of safety of Trusted Computer System Evaluation Criteria (together of criteria given by or the Department of Defense of the United States in the orange book, Orange book). The principal work concerns in particular on the discrétionnaire Access control and the implementation FLASK/TE of NSA. Many extensions concerning safety were integrated into the principal project, FreeBSD, starting from the versions 5.x.

Linux

Linux is the current name of the free Operating system , Multitâche, Multi-punt-form and Multi-utilisateur of the type Unix based on the Noyau Linux writes by Linus Torvalds. Linux is not strictly speaking based on safety, but various distributions give each other the objective of it.

Adamantix

Adamantix, also known under the name of Trusted Debian , is a Operating system GNU/Linux, based on Debian, and directed safety with in particular of protections against the attacks using of the overflow S with PaX and SSP and a advanced control of the system using RSBAC (Rule Set Based Access Control).

Annvix

Annvix is derived from Mandriva to produce a protected distribution dedicated to the waiters. It employs protection Stack-Smashing Protector (SSP) against goings beyond of plugs report and will use soon RSBAC (Rule Set Based Access Control).

Fedora Core

Fedora Core is a project based on the distribution Red Hat. It is the only widespread distribution which integrates additional elements of safety, with the integration of the module of safety SELinux with the obligatory access control (Mandatory access control for the management of the rights of the users, and in particular the systematic use of the preventions of going beyond of plug.

Hardened Gentoo

Hardened Gentoo is a sub-project of Gentoo. Are used the module of safety SELinux, the Patch PaX against goings beyond of plugs report, RSBAC (Rule Set Based Access Control), the patch Grsecurity restricting the rights of administrator and script Bastille Linux.

Immunix

Immunix is a commercial distribution using various heavy security systems. Y appear StackGuard, the signature and the coding of the achievable ones.

Hardened Linux (Wendzel Linux)

Wendzel Linux is a small distribution to play the part of fire wall, of detection of intrusions and door of access to the networks VPN. The distribution is based on the Slackware but underwent deep modifications like the use of the patch Grsecurity for the Kernel.

Solaris

Solaris is the Operating system Unix owner of Sun Microsystems. The system in itself is not centered on safety. Functionalities coming from the project OpenSolaris as ZFS are amalgamated upstream with the official version of Solaris after various certifications.

Trusted Solaris

Trusted Solaris is mainly used by authorities gourvernementales in the field of calculation. This distribution has detailed audits, it uses the obligatory access control (Mandatory access control) with methods of physical authenfication via peripherals and RSBAC (Rule Set Based Access Control). Part of these sedentary means were transferred in the version Solaris 10.

Notes and references of the article

Random links: