Secure By Design: How Guardian Digital Secures EnGarde Secure Linux
Guardian Digital has made available
an explanation of the security model used in creating EnGarde Secure
Linux. "
Guardian Digital builds EnGarde Secure Linux on the principle that security is the first priority of a modern operating system and must therefore be considered in every element of its design. This is very different from the more common practice of "hardening" a system by attempting to remove security vulnerabilities after the system is complete, for example by restricting permissions or closing ports. To achieve an unparalleled level of security, EnGarde Secure Linux tailors its system following the principle of "least privilege" in which every program and service is given only the privileges and access it needs to do its job, and no more."