Most Recommended Distribution w/ Emphasis on Security

[kuphryn]

Hi,
I have some experience managing a Linux workstation. I have used Redhat and Debian within the last two years. I started out with Redhat because I wanted to learn the fundamentals before moving onto a more advanced distribution. Less than a year later I decided to go with Debian. Currently I am no longer running Linux because I managed to crash both distribution to the point where I would have to reformat. Here is what I know so far:

Redhat:
[Pros]
- Easy to install
-User friend
-XWindows is very similary to MS Windows by default
[Cons] (the same reason I crashed the system)
-Very difficult to compile a new and clean, i.e., www.kernel.org. I got the system perfectly set, but then it never booted again after I compile a new kernel. Redhat for some reason name its kernel "redhat" rather than "linux."

Debian:
[Pros]
-Extremely secured by default
-Sizable software collection
-Faster bootup
-Innovative installation options, i.e., 3-7 disks installation

[Cons]
-Not user friends for beginners even though I have used Redhat.
-I took a few hours to get XWindows going. For the most part I spent configuring the graphic card.
-New software is different, and relatively difficult to install because it goes through Debian's software collection rather than something one can download and then install like Redhat's RPM or MS Windows.
-Difficult to change network settings. This was the reason my system crashed. I initially got the system to recognize my router and DSL connection. It downloaded all files via internet. However, I then changed the IP and DNS on the router, which meant I needed to change them in Debian as well. I was never able to get Debian to recognize the internet connection. I tried Linuxconfig, but it did not work. While frustrated and desperate, I executed and option in Linuxconfig that I below "archived" the entire system. Debian never booted up again after that.

In general, I believe Redhat is much more user friendly than Debian except for when one tries to compile a new kernel. Debian is an excellent workstation-server distribution, but it is difficult to manage without help from advanced users.

I am running Win2k Pro and is now sick of it. I am definitely ready to go back to Linux. To be honest, I have not decided what distribution I want to install now. I am fond of Debian, but I fear that I would not be able to recognize the network settings and manage new software. Secondly, Debian is "real opensource," as in the Debian team is not out to make money. I fear Debian will not be around longer than Redhat.

I have not used FreeBSD or Slackware. I definitely want a challenging distribution, but I also want one that is manageable. Based on my experienced and view so far, What distribution do you think best suits me?

Kuphryn
Kuphryn@myrealbox.com

 

[rahvin]

Slackware is a non-modified version. Ie their kernels are almost straight from Linus, all the other distributions apply numerous patches.

OpenBSD is by far the most secure default install of a unix operating system you can get.

You can compile and install any software you need from a source tarball in linux, you don't need a binary package like .deb or .rpm to install software, the packages just make it easier.

Debian has a utility to convert any .rpm to a .deb.

Redhat has a very specific process to upgrading the kernel, if you compile your own you have to make sure the sym-links in the /boot directory follow through after you install the new kernel (it is a bit tricky to figure it out if you don't understand linux very well). It is easiest to use their source .rpms and to apply the patches you want to that and then use their makefiles to build the kernel the way you want.

Personally I have found Redhat to be a very clean installation, it doesn't install crap you don't need if you specify packages during the installation and they have a reasonably secure installation in version 7.1 (not openbsd quality by any means). Big Caveat is that you need to download 2 CD's and the powerpack if you want a good workstation version like Mandrake provides. But I think Mandrake installs a lot of crap you don't need too.

 

[DaHitman]

If it absolutly has to be secure... OpenBSD is the TOPS in the world as far as I am concerend. Its actually not a hard install either.

Also, Trustix is supposed to be pretty much moving towards being to Linux what OpenBSD is to the BSD world.

Check it out here.

 

[cureless]

You need to give both distros a second chance. Red Hat works with downloaded kernels with (almost) no problems as long as you have a normal set up. Just make sure you add the correct entry to lilo, then, if it doesn't boot you can go back to the previous entry in lilo (which you should leave as linux-old).

As for debian and the network configuration, just go the the files in /etc related to networking and configure whatever you want, everything is there, easily accessible, you just have to know where to find it. There's documentation on-line. You could start in /etc/network

As for the most secure distro, you can start with OpenBSD if you like some "hard core" stuff. Otherwise the later Mandrakes have a security setting which works. I believe the later Red Hats also have a safer instalation (as opposed to before). Always check that what's running is actually of use, otherwise remove it (from the start up scripts). Keep up with distro upgrades, if you want, you can run an automated tool, there are many out there.

There are also some distros that ship "secure" versions of the normal distros. Another breed is a set of scripts that "harden" you current distro. You can go to the Linux Weekly News distribution page and scroll to the "Secure Distributions" section. Also check out their security page.

cl

 

[goldboyd]

DEFINATELY OpenBSD, by far the securest *nix out of the box. However just about any *nix will be very secure if admined correctly. Dont get me wrong, OpenBSD is great, but the reason that they've never had a security hole in the default install in 3 years or whatever they claim, is because there are very few services running. I believe port 22 is the only open one by default, no web, no telnet, no ftp, just ssh.