Most Secure Operating System

Of all the operating systems available, OpenBSD and Solaris 10 seem to be
the most secure, but which is more secure out of the two?
OpenBSD has a better past record of security than Solaris due to it's
'secure by default' approach, but solaris 10 has some new pretty cool
security features, which can reduce the threat of buffer overflows and
other vulnerabilities.

Check out these URL's for more info into Solaris 10 security:
http://www.securityfocus.com/infocus/1776
http://wwws.sun.com/software/solaris/10/

What do you think. Solaris 10 or OpenBSD?

Anonymous

Anonymous wrote:

> Of all the operating systems available, OpenBSD and Solaris 10 seem to be
> the most secure, but which is more secure out of the two?
> OpenBSD has a better past record of security than Solaris due to it's
> 'secure by default' approach, but solaris 10 has some new pretty cool
> security features, which can reduce the threat of buffer overflows and
> other vulnerabilities.
>
> Check out these URL's for more info into Solaris 10 security:
> http://www.securityfocus.com/infocus/1776
> http://wwws.sun.com/software/solaris/10/
>
> What do you think. Solaris 10 or OpenBSD?

Assuming you are not astroturfing: I don't think the question can be
objectively answered in a meaningful way, in final instance it comes down
to a subjective evaluation.

Personally I don't want any features for security purposes. While this is
not possible, I still would like as few of them as possible - each
additional level of complexity adds potential vulnerabilities.

Second consideration: security cannot be added. You either build a system
with security in mind from day one (and keep the approach throughout the
life cycle) or it will never be really secure. Post factum security
initiatives do not work.
--
Mailman

Mailman

Anonymous <> wrote:
>
> Of all the operating systems available, OpenBSD and Solaris 10 seem to be
> the most secure, but which is more secure out of the two?
> OpenBSD has a better past record of security than Solaris due to it's
> 'secure by default' approach, but solaris 10 has some new pretty cool
> security features, which can reduce the threat of buffer overflows and
> other vulnerabilities.
>
> Check out these URL's for more info into Solaris 10 security:
> http://www.securityfocus.com/infocus/1776
> http://wwws.sun.com/software/solaris/10/
>
> What do you think. Solaris 10 or OpenBSD?

Well first of all, Solaris 10 isn't a currently available system.
It's still in beta. It has not been released yet. Sun hasn't been
as clear as they should on this issue, but it shouldn't be as difficult
to understand as it seems to be.

Regardless...

OpenBSD is designed to be a tight OS. That's one of its driving features.
Solaris is designed to be a generally usable OS. It's less secure by
default, partly because it has more services open.

Solaris 10, after it's been released and has gone through the ringer
a few times, has the potential to be VERY secure. Their zoning will be
very useful for this sort of thing.

Of course, this is a default install we're talking about. For a secure
install, things should be locked down tightly, at which point Solaris 9
is probably equivalent to OpenBSD. Solaris 10 might best it, when it's
released.

And if you want REAL security, then dump Solaris X, *BSD, and what have you;
and go with Trusted Solaris. Not cheap, and not as easy to administer, but
essential in some cases.

Colin

Colin B.

Anonymous wrote:

>
> Of all the operating systems available, OpenBSD and Solaris 10 seem to be
> the most secure, but which is more secure out of the two?
> OpenBSD has a better past record of security than Solaris due to it's
> 'secure by default' approach, but solaris 10 has some new pretty cool
> security features, which can reduce the threat of buffer overflows and
> other vulnerabilities.
>
> Check out these URL's for more info into Solaris 10 security:
> http://www.securityfocus.com/infocus/1776
> http://wwws.sun.com/software/solaris/10/
>
> What do you think. Solaris 10 or OpenBSD?

Can't comment on Solaris, but if you want a high security system you can't
go wrong with OpenBSD.

I don't care for OpenBSD as a desktop I use FreeBSD and use OpenBSD as a
router on an old laptop that I have. My system is tight as they come. The
OpenBSD's firewall is IPF - You have complete control of the packet flow.

What ever you do stay away from windows.

Tommy15