Operating Systems


        The operating systems directory contains a number of operating systems
        and patches intended to "raise the bar" of security, some through
        proactive source code auditing, some through restrictive access
        controls, some through measures that prevent common vulnerabilities
        from being exploited.

          o Astaro Security Linux
            Astaro Security Linux is a Linux distribution designed for
            operation as a standalone firewall, providing packet filtering and
            application-level proxy services and IPSec-based VPN capabilities
            for connecting to/from compatible networks and devices.
            Administration is carried out through a web browser interface. It
            is downloadable as an ISO image.
            

          o BackTrack
            BackTrack is the result of the merging of two Innovative
            Penetration Testing live Linux distributions Based on SLAX
            (Slackware), BackTrack provides user modularity. This means the
            distribution can be easily customised by the user to include
            personal scripts, additional tools, customised kernels, etc.
            

          o Linux Kernel Security Patches (aka Openwall)
            This patch is a collection of security-related features for the
            Linux kernel, all configurable via the new 'Security options'
            configuration section. In addition to the new features, some
            versions of the patch contain various security fixes. The number of
            such fixes changes from version to version, as some are becoming
            obsolete (such as because of the same problem getting fixed with a
            new kernel release), while other security issues are discovered.
            

          o OpenBSD
            The OpenBSD project produces a FREE, multi-platform 4.4BSD-based
            UNIX-like operating system. Development efforts emphasize
            portability, standardization, correctness, proactive security and
            integrated cryptography. OpenBSD supports binary emulation of most
            programs from SVR4 (Solaris), FreeBSD, Linux, BSD/OS, SunOS and
            HP-UX.
            

          o Security-Enhanced Linux (aka selinux)
            Security-enhanced Linux is a research prototype of the Linux kernel
            and a number of utilities with enhanced security functionality
            designed simply to demonstrate the value of mandatory access
            controls to the Linux community and how such controls could be
            added to Linux. The Security-enhanced Linux kernel contains new
            architectural components originally developed to improve the
            security of the Flask operating system. These architectural
            components provide general support for the enforcement of many
            kinds of mandatory access control policies, including those based
            on the concepts of Type Enforcement, Role-based Access Control, and
            Multi-level Security.
            

          o Smoothwall
            SmoothWall is a secure operating system that converts a redundant
            PC / workstation / fileserver / rackmount device into a firewall,
            supports all popular connection types (Modem / ISDN / Ethernet /
            Cable / Ethernet ADSL / USB ADSL) and also features a fully logging
            firewall, DHCP server, IPSEC VPN capabilities. SmoothWall is
            webmanaged, so no keyboard, monitor, or mouse on the device is
            needed.
            

          o Trinux
            Trinux is a ramdisk-based Linux distribution that boots from a
            single floppy disk, loads it packages from an HTTP/FTP server, a
            FAT/EXT2/NTFS filesystem, or additional floppies and contains
            precompiled versions versions of popular Open Source network
            security tools for port scanning, packet sniffing, vulnerability
            scanning, sniffer detection, packet construction, active/passive OS
            fingerprinting, network monitoring, session hijacking, intrusion
            detection, and more.
            

            

            (Note: This list of software and information available at
            Wiretapped is not exhaustive. Users are encouraged to browse and
            search the archive and read any available "-README.txt" files that
            are available)