More secure Knoppix

faq
flatforty
contribute
subscribe
configure
search
rdf

main
parent

More secure Knoppix
by cm on Friday 06/Aug/2004, @01:27

> Q: What hardware and software do you work with?
> Nils: I work with a Linux system that was set-up from an installed Knoppix with some adjustments for a more secure operation.

@Nils: Did you somewhere document what you changed to make Knoppix more secure? I think there are quite a few people running HD installs of Knoppix who might be interested in hearing that...

Related Links

·   Articles on Community and Events
·   Also by cm
·   Contact author

The Fine Print: The following comments are owned by whomever posted them.
( Reply )

Re: More secure Knoppix
by superstoned on Friday 06/Aug/2004, @02:59

and what did he do to make knoppix more debian-compattible, as this is the problem for alot ppl - apt-get often breaks, especially with dist-upgrade. I use kanotix, which solved this, but its annoying if I try to fix problems related to this on knoppix-hd installs on other computers.

[ Reply To This | View ]

Re: More secure Knoppix
by Nils Magnus on Friday 01/Oct/2004, @14:24

A lot of people have complained that apt-get dist-upgrade is not really possible with Knoppix, and they are usually right. I came up with a rather simple solution for this: I ususally don't do dist-upgrades. I do security fixes by hand and may upgrade single packets the same way, but every twice a year or so I ask Klaus to release a new version of Knoppix and just install it from scratch.

It's a good way to keep your system clean and you have rather easy desaster recovery strategy for free :)

[ Reply To This | View ]

Re: More secure Knoppix
by Anonymous on Saturday 02/Oct/2004, @02:36

> every twice a year or so I ask Klaus to release a new version of Knoppix

Considering that more than twice releases every year there must be other people other than you asking too. :-)

[ Reply To This | View ]

Re: More secure Knoppix
by superstoned on Sunday 03/Oct/2004, @11:37

well, debian's best thing is its upgradabillity... so I'd prefer not having to reinstall it, that's a windows thingy ;-)

[ Reply To This | View ]

Re: More secure Knoppix
by Nils Magnus on Friday 01/Oct/2004, @14:19

Making Knoppix more secure is mainly a matter of personal preferences. In most aspects Klaus already does a pretty decent job; however, in some aspects like a better IPSec support he could still improve a lot, though.

I also think, Knoppix could be good platform to distribute a community driven trust base by placing some well-defined certificates onto the CD/DVD. In the end, every user should decide for herself or himself if this kind of trust is suitable. However, some well known web pages could be security-improved this way.

Other things I usually add to an installed Knoppix are lots of not so well know and widely used security tools as I need them for my daily work as a security tester.

[ Reply To This | View ]

The Fine Print: The previous comments are owned by whomever posted them.
( Reply )


		"I just wanted to be certain that the code was unmaintainable." -- Charles Samuels
KDE®, "K Desktop Environment", "KDE Dot News", "got the dot?" and the KDE Logo® are trademarks or registered trademarks of KDE e.V. in the European Union, the United States and other countries. All other trademarks and copyrights on this page are owned by their respective owners. Comments are owned by the poster. The rest: Copyright © 2000-2008 KDE e.V. for The KDE Project. For further information or comments on this site, please contact the Webmaster.