What is linux-hardened and how is it different from the basic linux kernel?

Octopus1348@lemy.lol to Linux@lemmy.ml – 47 points –

I am too lazy to research it and still wondering. Can someone give me a basic explanation of it?

21

You are viewing a single comment
View all commentsShow the parent comment

https://isopenbsdsecu.re/
I don't think much changed since then, but would love to be proven wrong.

+1, but OpenBSD can enforce security (Linux have landlock, *san, ACL, MAC but cannot enforce them, while OpenBSD doesn't but can enforce pledge and unveil and even for some ports like chromium and firefox)

https://madaidans-insecurities.github.io/

But see Chimera Linux.

I heard of Chimera multiple times now, but everytime I look into it it doesn't seem to be more interesting and useful than say Alpine.
Do you have any write-ups about the security advantages of Chimera Linux?

I mean Chimera is using FreeBSD userland, and they expressed why GNU coreutils used by most distro have "problem". Since we are talking about BSD. (OpenBSD's userland is less in feature and it is cleaner)

(so that's bring an advantage in security lol)

While coreutils may seem lightweight enough to not cause any issues already, there are some specific reasons the system uses a BSD-derived userland. The primary one is probably that the code of the BSD versions is overall much cleaner and easier to read. There are no cursed components such as gnulib, the codebase is leaner, and more aligned with the project’s goals.

1 more...