Ubuntu vs. openSUSE: Security?

[GTaudiophile]

Between the two distros, is one inherently more secure than the other?

 

[Goosemaster]

On a tanget I always felt the AppArmour stuff in Suse was a nice touch.

 

[GTaudiophile]

Originally posted by: Goosemaster
On a tanget I always felt the AppArmour stuff in Suse was a nice touch.

From what I understand, Ubuntu now offers that as well since like 8.XX.

 

[Gooberlx2]

I can say that opensuse is pretty good about releasing updates and patches, though I'd imagine ubuntu is pretty good as well. I'd guess Ubuntu is inherently more "at risk" due to the much larger userbase.

edit:
I can also say that opensuse encourages/observes a more concrete separation between root and users during install. Where ubuntu just sudos with the user's password after a default installation.

 

[VinDSL]

Originally posted by: GTaudiophile
Between the two distros, is one inherently more secure than the other?

Short answer... No!

Long answer...

I run both (plus other distros) and they're both excellent!

Not sure why you're asking but...

If you're looking for the most secure OS - that would be FreeBSD 7.2 (which I also run).

FreeBSD is what the Chinese Government uses for both security and Cyber Warfare!

Extra credit reading: http://news.google.com/news?&q=freebsd+china (Google News)

China is a nation of hackers - some of them officially bonified and sanctioned by their goverment (including the military) and FreeBSD is their pick (or Kylin - a FreeBSD derivative) sooo...

Shameless copy n' paste: FreeBSD is used as a platform for devices and products from many of the world's largest IT companies, including: Apple, Cisco, Juniper, NetApp. It's also used to power some of the biggest sites on the Internet, including: Yahoo!, Yandex, Apache, Rambler, Sina, Pair Networks, Sony Japan, Netcraft, NetEase, Weathernews, TELEHOUSE America, and many more.

If you're going to use it for server software, I might mention that FreeBSD sites have been the winner(s) in the 'uptime' stats on Netcraft, ever since when. It's always a cause for celebration if anybody (besides FreeBSD) gets in the Top 10. Many of these FreeBSD servers have not been rebooted in years! No kidding!!!

If you want maximum security (and stability) the choice is obvious - FreeBSD!

For non-government/military/industrial use, any Linux distro (latest kernel) will work just fine!

Matter of fact, I don't think you could make Linux unsecure if you wanted to...

Be aware: FreeBSD isn't as easy to (initially) setup as Ubuntu and openSUSE. Took me a few 'stabs' at it before I got the procedure down pat. But, if security is your goal, it's worth the extra effort!

If you're new to Linux, I would SUGGEST that you try Linux Mint (basically Ubuntu with lipstick)! Mint 6 (x86_64) is my current favorite - and perfect for wayward Windows users! Haven't tried Mint 7 yet, but users are creaming themselves over "Gloria"...

openSUSE (10.x/11.x) was my former favorite, and I still run it in a VM.

I used to hate Ubuntu with a passion! However, I've been quite satisified with 'Jaunty' (9.04). It's equivalent to Windows 7 and Mac OS X, IMHO!

FreeBSD 7.2 aside, I would RECOMMEND: Linux Mint 7, Ubuntu 9.04, openSUSE 11.2 Milestone 2 - in that order...

 

[GTaudiophile]

I have experience with Slackware and Gentoo before installing Ubuntu Server 5.10.

I am considering something with a GUI next.

Just curious as to what is out there really.

I looked at the FreeBSD install manuals and it looks pretty straight forward...but perhaps more effort than I want to put into it.

 

[Nothinman]

If you're looking for the most secure OS - that would be FreeBSD 7.2 (which I also run).

Uh, no. FreeBSD runs pretty much all of the same userland software as any Linux distribution so they're almost equal. Of course there will be differences in the base system and kernel but network daemons are much more problematic and they're exactly the same.

You might be able to get away with calling OpenBSD the most secure OS out there because they've put a lot of time into auditing their code but again it comes back to the userland daemons that you want to run and the OpenBSD people only audit their core, ports and packages are at your own risk.

And with a proper SELinux config I'd say that Linux is more secure than either of them.

 

[irishScott]

CentOS is basically a clone of Red Hat Enterprise. Haven't tried it but I've heard good things about it's security and it's getting positive reviews across the board besides.
http://distrowatch.com/table.php?distribution=CentOS

 

[Nothinman]

Security is a process, not a product. Your system is only as secure as you make it no matter what OS or software you install.

 

[VinDSL]

Originally posted by: irishScott
CentOS is basically a clone of Red Hat Enterprise. Haven't tried it but I've heard good things about it's security and it's getting positive reviews across the board besides...

I run CentOS on my production server, and Slackware on my private servers. They're both okay - been running them for years.

Of those two, I have more confidence in Slack!

I've been defaced a couple of times on CentOS, but nobody has ever busted into the Slackware box!

 

[VinDSL]

Originally posted by: Nothinman
Security is a process, not a product. Your system is only as secure as you make it no matter what OS or software you install.

Yeah, and stress doesn't exist either - it's just fear and anger!

Um...

What's your point?!?!?

 

[Nothinman]

Of those two, I have more confidence in Slack!

I've been defaced a couple of times on CentOS, but nobody has ever busted into the Slackware box!

And anyone who pays attention will have more confidence in RHEL/CentOS because there's actually a team of people who work on security issues and updates for them.

What's your point?!?!?

It seemed pretty straightforward to me...

 

[VinDSL]

Originally posted by: Nothinman

What's your point?!?!?

It seemed pretty straightforward to me...

What... that you're good at twisting words?!?!?

The OP wants to know...

Originally posted by: GTaudiophile
Between the two distros, is one inherently more secure than the other?

The answer is NO - period - exclamation point!

I was simply trying to give him some reasonable alternatives... depending on his application.

You, on the other hand, are pulling a 'guilt trip' on the guy, making it sound like he doesn't know anything about security.

LoL!

Everything is a competition with you... and it's getting old.

That's my "straightforward" take on what you're saying!

Originally posted by: Nothinman
Security is a process, not a product...

For something that's "not a product", it seems like a lot of companies have figured out a way to monetize it.

Heh!

Are you drunk, or just talking out your ass?

 

[Nothinman]

What... that you're good at twisting words?!?!?

My words aren't twisted, they say exactly what they're supposed to mean.

The answer is NO - period - exclamation point!

Exactly, but then you followed it up with a bunch of BS about FreeBSD.

You, on the other hand, are pulling a 'guilt trip' on the guy, making it sound like he doesn't know anything about security.

Your interpretation of what I wrote is pretty entertaining.

 

[VinDSL]

Originally posted by: Nothinman
Your interpretation of what I wrote is pretty entertaining...

Well, that's all part of 'it' I suppose...

It takes a guy like me to keep you 'lifers' in line!

Thanks for being a 'good sport', my friend!