| 1 |
Hi everyone, |
| 2 |
|
| 3 |
I'd like to announce that a new release of Tin Hat is out. Tin Hat is a |
| 4 |
fully featured Linux desktop based on Hardened Gentoo which runs purely |
| 5 |
in RAM. It aims to be very secure, stable, and fast. |
| 6 |
|
| 7 |
This is a maintenance release with some minor bug fixes and lots of |
| 8 |
updates. The kernel was held steady at 2.6.28-r9, the tool chain was |
| 9 |
upgraded to gcc-4.4.2-r1, glibc-2.11-r1and binutils-2.20, and over 300 |
| 10 |
other packages were also upgraded. On the desktop, gnome was upgraded |
| 11 |
to 2.26.3 from 2.24.1 and firefox was upgraded to 3.5.4 from 3.0.14. |
| 12 |
|
| 13 |
Tobias Klein from trapkit.de was kind enough to allow us to bundle his |
| 14 |
checksec.sh script which tests system binaries or running processes for |
| 15 |
relro, ssp, nx, pie and aslr. Every binary shows these hardening |
| 16 |
features enabled except X and evolution which have only partial relro. |
| 17 |
A comparison of a running Tin Hat system and a running Ubuntu system can |
| 18 |
be see at |
| 19 |
|
| 20 |
http://opensource.dyc.edu/sites/default/files/karmic-checksec.txt |
| 21 |
http://opensource.dyc.edu/sites/default/files/tinhat-checksec.txt |
| 22 |
|
| 23 |
|
| 24 |
Thanks to all the hardened-dev people. |
| 25 |
|
| 26 |
|
| 27 |
Home page: http://opensource.dyc.edu/tinhat |
| 28 |
Downloads: http://opensource.dyc.edu/tinhat-downloads |
| 29 |
|
| 30 |
|
| 31 |
-- |
| 32 |
|
| 33 |
Anthony G. Basile, Ph.D. |
| 34 |
Chair of Information Technology |
| 35 |
D'Youville College |
| 36 |
Buffalo, NY 14201 |
| 37 |
USA |
| 38 |
|
| 39 |
(716) 829-8197 |
Archives