EnGarde Secure Linux v2 Out

Chuck writes "I came across EnGarde Secure Linux about two years ago when it was first released, and I see they just released the newest version. Improved Mandatory Access Control using LIDS, awesome web-based manager, code from the Openwall Project and winner of the Network Computing Hardened Linux product of the year. I love EnGarde."

so many?

[Anonymous Coward]

n00b alert. ok i understand the need for a secure platform like this one, but why are there so many different distros out. wouldn't it be more competitve to merge certain distros?

Re:We were considering implementing it

[RedOregon]

What? You decided not to implement because it requires you to configure it? And if you don't, it gives a benign error?

(Link points at an advisory stating that log check emails will bounce by default if not configured)

Re:No skills required?

[Anonymous Coward]

What they mean is you don't need to be a Linux guru to set up the box. Everything is using web browser with a few clicks, even updating your system. The only thing is you have to sign up with GDSN to keep up with updates and support. I believe they have 30 days trial for it on the new version just released few weeks ago. Originally one could update the system without signing up for GDSN account (they publish updates through ftp) but that doesn't seem like gonna happen with this new release. I could understand. They need to make $$$. The download version (Community version) does have some limitations as how many domains you could have. You could still update your system if you decide to use it by download the src packages and roll your own updates. It could be tedious.

In short, if you are willing to pay $229, IIRC, for GDSN account per year then it is well worth it. From biz stand point, I don't think that is too much at all. If not, roll your own updates or use something else that fit you.

Re:Sounds like..

[Anonymous Coward]

code review != security

it just helps reduce bugs/vulnerabilities

LIDS etc OTOH protect when a bug is found, something OBSD does not.

furthermore, OBSD audits the base intall, which is essentially usefull.

Secure by default only, 'cept noone only runs default.