RE: Newbie: RedHat 8 or OpenBSD??

["Michael Vaughan" <list () predator-hunter com>]

In answer to your question..."It Depends".

It will depend on how experienced your engineers are with Linux.
OpenBSD can be a pain to install and configure.  RedHat on the other
hand is comparatively easy to setup. OpenBSD from what I understand is
the most secure version out of the box but again securing it 'could' be
a pain. However, you can get scripts to harden Redhat fairly well. In
addition, You CAN further Harden Redhat by patching the Kernel:
http://www.nsa.gov/selinux/index.html thereby further hardening the
Linux server.  As to which version is 'more secure', that is (IMHO)
entirely subjective and dependant on the experience of those that will
be setting up and managing the server(s).

Regards,
-Michael Vaughan
mvaughan () predator-hunter com

-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GIT/GMD/GO d+ s+:+ a32 C++ UL+++ P+ L+++!E W+++ N++ o- K- w++++ O- M+ V
PS--- PE+ Y+ PGP++ t+++@ 5-- X++ R- tv b++++ DI+++ D--- G++ e* h-- r--
z++
------END GEEK CODE BLOCK------

The information contained in this message may contain privileged and
confidential information and is intended only for the internal company
use of the individual or entity named above.  If the reader of this
message is not the intended recipient, or the employee or agent
responsible to deliver it to the intended recipient, you are hereby
notified that any examination, distribution or copying of this
communication is strictly prohibited.  Furthermore, any and all
recipients of this message are prohibited from engaging in the
unauthorized dissemination of the information contained herein to
person(s) outside the company.   If you have received this communication
in error, please notify sender immediately. 

-----Original Message-----
From: GSG Designs [mailto:gsgdesigns () hotmail com] 
Sent: Wednesday, October 30, 2002 3:56 PM
To: security-basics () security-focus com
Subject: Newbie: RedHat 8 or OpenBSD??

I'm fairly new to this, so please bare with me.  If this question has
been 
asked in the past, I apologize.  I'm new to the listserv as well.

We are discussing starting our own web server.  There is debate on
whether 
RedHat 8 or OpenBSD is more secure.  What are your thoughts?  We will be

doing online orders with credit card info, etc.  Do you have any
resources 
to point us to?  (We will be running Apache, probably a 'duh'.)

Thanks.






_________________________________________________________________
Broadband? Dial-up? Get reliable MSN Internet Access. 
http://resourcecenter.msn.com/access/plans/default.asp