Security Innovation's Microsoft/Linux web server security study

Security Innovation's Microsoft/Linux web server security study

Red Hat is the ass of Linux. I don't know why they can't meter us against someone like Novell, who isn't a Microsoft-style "We own most of our market so we can do whatever we want" pile of crap.

I'm sure many distributions have dedicated security teams, although I can say first-hand that Gentoo has a very active security crew who not only gets patches out as soon as a vuln is known-- sometimes before upstream-- but also researches the integration of PaX, GrSecurity, mandatory access control, stack smash protection, and anything else feasible (meaning easy to deploy and not terribly expensive in terms of space or performance overhead) to use so that new security flaws are "already taken care of."

Ubuntu Linux may hopefully be going the proactive route, which seems very evident as per the official formation of Hardened Ubuntu by the Ubuntu Linux security team and the Hardened Debian team. This would negate a large portion (approximately 80%?) of security notices in whole or in part.

Note that the Hardened Debian team was created to bring the advances in Hardened Gentoo to the Debian world; and these guys all also communicate directly with the Adamantix team, The PaX Team, and in some cases the GrSecurity team. They also all use SeLinux and/or RSBAC for MAC as well as GrSecurity.