bk99.de entertain the web since 1997

bk99.de
hß · SecurityCurated

c’t Linux 2015: securing servers and long-term Linux distributions tested

Summary

The special issue c’t Linux 2015 brought together guides to securing servers and a comparison of ten distributions with long-term support. Further topics were Linux containers, Btrfs as the default file system, console tools and the X11 successor Wayland. In addition there was KDE Plasma 5, a comparison of mail clients and a DVD with eight distributions.

Ideas

  • Long-term distributions are the basis for predictable server operation.
  • Containers package server software so that it is easy to update and move.
  • Wayland simplifies the graphics stack and makes the X server superfluous.
  • Btrfs became the default in more and more distributions.

Insights

  • In 2015 everyday Linux shifted noticeably towards containers and new graphics and file system layers.
  • Security starts with choosing a distribution with a reliable support period.

Facts

  • The magazine’s DVD contained eight distributions with seven desktops.

References

Critique

  • As an announcement of the issue, the report itself provides no test results or concrete hardening steps.

Recommendations

  • For servers, choose a distribution whose support period covers the planned period of use.
  • Plan the use of Btrfs with snapshots, backups and known limits such as RAID5/6 in mind.

Read the original article

Search the Web Archive

hß · 2025

iX workshop: securing Linux servers effectively and comprehensively

In 2025 heise advertised a five-day iX workshop on hardening Linux servers with trainer Florian Winkler of B1 Systems. Topics were encryption, securing network services, two-factor authentication, SELinux and AppArmor, as well as log analysis and intrusion detection. There was also an introduction to penetration testing and practical exercises via SSH in a training environment.

hß · 2026

iX workshop: hardening Linux servers with encryption and access control

In 2026 heise again advertised the five-day iX workshop “Hardening Linux servers” with Florian Winkler of B1 Systems, this time with dates in September and November. Topics range from physical security through encryption, two-factor authentication and SELinux/AppArmor to logging, monitoring and intrusion detection. The target group is Linux administrators and security officers who want to secure their servers systematically.

hß · 2018

Linux: kernel and distributions protect against the Foreshadow/L1TF processor flaw

In August 2018 the processor flaw Foreshadow, also known as L1 Terminal Fault (L1TF), became known in many Intel CPUs; the Linux main branch and major distributions immediately provided protection. Anyone running third-party virtual machines also had to switch off hyper-threading, which could cost VMs up to 50 percent of their performance. The stable and longterm kernels appeared after less than 24 hours of review.