EnGarde Secure Linux

Infobox OS
name = EnGarde Secure Linux



caption = Web interface screenshot
website = http://www.engardelinux.org/
developer = Guardian Digital, Inc
family = Linux
source_model =
released =
latest_release_version = 3.0.21
latest_release_date = October 2008
latest_test_version =
latest_test_date =
marketing_target =
language =
kernel_type =
ui =
license =
working_state =
supported_platforms = i686, x86-64 with 512 MB RAM
updatemodel =
package_manager =

EnGarde Secure Linux is an Open Source server-only Linux distribution developed by [http://www.guardiandigital.com/ Guardian Digital] . EnGarde incorporates many open source tools such as Postfix, BIND, and the LAMP stack.

The platform includes services for web hosting, DNS and email, and others. Since 2005, SELinux has been incorporated into the platform by default. [ [http://selinux.sourceforge.net/] SourceForge Listing: SELinux for Distributions ] Other security services are included by default as well, such as intrusion detection, anti-virus, network management and auditing and reporting tools.

Users can configure the services through the command line, or remotely manage them through WebTool, the platform's browser-based interface.

Overview of history and development

Since its inception in 2001, the platform has been developed as an OS that incorporates only server functionality while focusing on security as the priority. Originally, the platform loosely drew on some of the code from early versions of Red Hat. [ [http://lwn.net/Articles/154522/ ] "A Look at EnGarde Secure Linux 3.0" - LWN.com October 5, 2005] Within less than a year of development, much of that was re-engineered. Since then EnGarde has been treated as its own platform, as it maintains its own package repository based on RPM, among other changes.

Additionally, many desktop functions were not included. For example, EnGarde Secure Linux does not include the X Window System. Traditionally, this kind of utility is called "hardening." According to the company, the platform has been engineered to maintain this focus on security for server functions. [ [http://lxer.com/module/newswire/view/89907/index.html] " The LXer Interview with Dave Wreski" - Lxer.com July 23, 2007]

Specific focus

EnGarde Secure Linux was one of the earliest distributions to include SELinux for complete server implementations, and was one of the very first Linux server platforms designed solely for security. Guardian Digital does not develop a 'non-hardened' version of the platform.

Because there is no X Window interface, using the distribution requires the use of a second computer in order to configure. The graphic interface, accessible through a web browser, is one of the remarkable features of EnGarde Secure Linux. Linux.com reviewed the platform in November 2005, where WebTool was described as "innovative and well-designed and lets you get productive quickly." [ [http://www.linux.com/articles/49877] "Test Drive EnGarde Secure Linux" Linux.com - November 23, 2005 ] A recent review on PolishLinux.org gave it a positive review, but argued it could have included more popular modules and packages. [ [http://polishlinux.org/linux/engarde-secure-linux-server/] "EnGarde - Secure Linux Server" polishlinux.org - August 7, 2007 ]

EnGarde Secure Linux branches

There are two branches of EnGarde Secure Linux: Community and Professional.

:* Community Version ::This branch, also known as EnGarde Secure Community or EnGarde Secure Linux Community Edition, is the free downloadable version of EnGarde Secure Linux distributed by Guardian Digital, Inc. This distribution is not "officially" supported but Guardian Digital supports the users via the engarde-users mailing list and online forum.

:* Professional Version ::This branch, also known as EnGarde Secure Professional or EnGarde Secure Linux Professional Edition, is the version of EnGarde Secure Linux sold and officially supported by Guardian Digital, Inc.

Development cycle

Guardian Digital is currently releasing platform updates and upgrades about once every thirty to sixty days. Updates for current users are downloaded through GDSN (Guardian Digital Secure Network): a support system intended to provide customers with software updates, version upgrades, and comprehensive technical support. Designed to connect EnGarde Secure Linux users to expert security and application engineers, GDSN is the most cost-effective way to ensure system and network security through updates and personalized support.

Release history and developments

Guardian Digital publishes a detailed history on their website. [ [http://www.engardelinux.org/modules/index/release_history.cgi/ Release History] . Engarde Secure Linux.] There have been twenty one releases since September 2005.

Some of the early design parameters included SELinux functionality, 64-bit support, interfaces for network intrusion detection, as well as translations for both Spanish and Italian. Other versions of EnGarde are currently being translated into other languages.

Other changes include a point-and-click GUI for using SELinux, automatic hardware inventory generation and a new WebTool API guide for community modules. Changes to the IDS with an Ajax interface and a real-time WebTool support tool are also some changes. [ [http://www.engardelinux.org/modules/index/release_history.cgi] EnGarde Release History as of August, 2007 ]

References

External links

* [http://www.engardelinux.org/ Official Website]
* [http://www.engardelinux.org/forums/ EnGarde Secure Linux Forums]
* [http://www.engardelinux.org/modules/index/selinux/articles.cgi/ EnGarde Security Linux SELinux]
* [http://www.linuxsecurity.com/ LinuxSecurity]