| DistroWatch Weekly
|DistroWatch Weekly, Issue 30, 5 January 2004
- Hardened Linux From Scratch
- JAMD and Xdefine Linux
- Most visited pages in 2003
- Released last week
- Upcoming releases: Knoppix 3.4
- New additions: Tilix, Shabdix, SCI.Linux, Overclockix, Tao, ZENIX, Polar Bear, Slix, WOMP!
- New on the waiting list: Litrux, Lineox, Rocks Cluster, Vermillion, Routix, Kanotix, LIVUX, Dave/Dina, Bluewall
- Reader feedback: TurboUpdate
Welcome to this year's first edition of DistroWatch Weekly. If pages seem to load slower than usual, that's because the Knoppix review published here yesterday proved extremely popular with the Slashdot crowd for much of today. Things should be slowly coming back to normal now, so let's get on with the programme.
Hardened Linux From Scratch
The 4th quarter of 2003 brought us a surprisingly high number of successful attacks on servers hosting high-profile Linux projects. Some of the compromised machines included servers running the Debian project, GNU, MPlayer, Savannah and others, and there was even an attempt to sneak a Trojan Horse into the Linux kernel development tree. While none of these attacks caused any serious damage to the affected projects, they have succeeded in making parts of the projects' web sites inaccessible for a prolonged period of time, causing annoyance to many of us. They have also highlighted the need to take security issues more seriously than ever.
One of the new projects aiming to educate Linux users about various methods of preventing common exploits is the newly launched Hardened Linux From Scratch (HLFS) project. This is part of the growing family of Linux From Scratch (LFS) projects, which includes the original LFS, as well as Automated Linux From Scratch (ALFS), Beyond Linux From Scratch (BLFS) and other subprojects. What is HLFS all about? Let the developers explain:
"Over the past few weeks, a discussion about a security-oriented LFS book has dominated the lfs-security list. Some clear ideas about the form and content of this initiative are crystalizing, and it was decided to give the initiators of this project a decent platform to work on. So far, a mailinglist (hlfs-dev)
has been created for Hardened Linux From Scratch, as it was dubbed. HLFS will become a book that provides the reader with a fundamental understanding of security that can be used as a base for further research. Part of the process in teaching this will be to build a hardened system step-by-step."
The security of Linux servers is something that, quite frankly, most of us would rather not deal with: an unexciting world of buffer overflows, hardened kernel patches and mandatory access control policies. Yet, that's the price to pay for the convenience of the World Wide Web of interconnected computers. And if the other LFS projects are anything to go by, Hardened Linux From Scratch will not only provide great educational value for absolutely free, it will do so in a hands-on and fun way for the benefit of all of us. Interested? Then join the mailing list and start learning.
JAMD and Xdefine Linux
Some of you might recall the good words we have put in for the JAMD Linux project, based on positive reviews and user feedback on the distribution's forums. Unfortunately, the project's future has become somewhat uncertain, due to the continued absence of the project's developer Jim Lucha from the forums, as well as a lack of any development roadmap. Upon some investigation, it turned out that Jim's name had resurfaced somewhere else, on a web site belonging to a new commercial Linux company called Xdefine. This is from the Xdefine's about pages:
"James Lucha, Chief Technical Officer, Xdefine, Inc. Graduated from University of California, Mr. Lucha who has extensive knowledge of Linux operating system joined Xdefine to take over the whole development of Xdefine Linux 2003. His feeling was that the customer has to always get 100% satisfaction and know they got a fair deal. Mr. Lucha met Mr. Sultani online, after talking for a while, he decided to join Xdefine as Chief Technical Officer."
The above note has since been removed from Xdefine's web site, but you can find a discussion about it on the JAMD Linux forums.
This brings up a question: do Free Software developers have some kind of responsibility towards the users of their products? Should they inform us about the project's status and any major changes to it? After all, many of them make no money from it and we are not paying customers, so why bother? On the other hand, there are human considerations - honesty and openness, especially in what we often perceive as our more honest and open world of Linux development, free of commercial considerations. Or is it all a lie? If a successful developer of Free Software is suddenly offered a regular paycheck to continue his or her work for a commercial company, can we really complain that we, the non-paying users, are suddenly abandoned?
If you are using one of the smaller distributions, how do you feel about it? Do you have a backup plan in case the developer gives up? Do you feel comfortable using one of the "one-man" distributions? Please discuss below.
Most visited pages in 2003
With the year 2003 behind us, let's take a quick look at the ranking of 20 most visited distribution-specific pages on this site and compare it to year 2002. The figures represent HPD or "Hits Per Day". Mandrake and Red Hat have retained their top two spots for the second year in a row, while some might be surprised by a rapid climb of Knoppix to the third position. You can view the 100 most visited pages of 2003 on the right column of the main index page.
|Released Last Week
LRs GNU/Linux Creme-13
A new version, Creme-13, of the recently revived LRs GNU/Linux distribution is out: "Merry Christmas and happy LRs with our brand new release Creme-13. Includes LFS-5.0, Linux-2.4.23, KDE-3.1.4 and much more. Some people don't need a full-blown LRs, so we will release three more ISO images in the next few days: LRs_with_X_and X-stuff (without KDE); LRs_Only_Console_tools; LRs_Pure_LFS." Visit the distribution's web site to learn more.
The long awaited CollegeLinux 2.5 has been released: "We are glad to announce the long awaited release of CollegeLinux 2.5 'Obi Wan'. Once again we did a release taking the necessary 6 months to bring something new, exclusive and never seen within the Linux community. Whilst there is a growing trend to release as often as possible, we have chosen to implement some important and innovative features and release only when there is something worth your time and bandwidth." Among the more interesting new features are a server robot which automatically installs and configures Apache, PHP, MySQL, SQLite, Webmin and PHPMyAdmin, and a slapt-get based auto-update engine integrated into Konqueror. See the full announcement for details. CollegeLinux is a Slackware-compatible Linux distribution designed for desktop and development workstations with many user-friendly enhancements.
Gibraltar Firewall 1.1
A new version of the Debian-based Gibraltar Firewall has been released. From the changelog: "Version 1.1, published 2003-12-23. This is the Christmas release, with only a few new features, but being a lot more resistant against buffer overflows and thus more secure due to the use of the PAX kernel patch. Updated the kernel to 2.4.23, which fixed the recently discovered brk() vulnerability. In addition to the update, the context patch (for virtual servers), the PAX patch and support for the zorp transparent proxy suite were added. Minor additions are an AES optimization and cryptoloop." Read the rest of the changelog for full details.
Openwall GNU/*/Linux 1.1
Openwall GNU/*/Linux 1.1 has been released: "After another year of development and many public Owl-current snapshots, Openwall GNU/*/Linux (Owl) release 1.1 is finally out. Owl 1.1 is currently available for purchase on a CD and will also be available for download after January 7, 2004. The major changes made since 1.0 are documented." Read the announcement on the distribution's web site and the complete changelog for further details. The product can be ordered from the distribution's online store for US$9.35. Openwall GNU/*/Linux is a security-enhanced operating system with Linux and GNU software as its core, intended as a server platform.
Ankur Bangla 1.0
FootNotes reports that Ankur Bangla 1.0 has been officially released: "The Ankur Bangla Project is proud to release version 1.0 final of the Ankur Bangla Live CD, running GNOME 2.4 localized into the Bangla (Bengali). The Live CD is based on Morphix and runs off the CD drive itself with little invasiveness to the existing setup. It is designed to be primarily a tool for collecting end user feedback on usability (especially of the translations of the GUI messages)." Read the rest of the announcement and release notes.
Aurox Live 1.2.0
This is a new release of Aurox Live CD, based on Aurox Linux 9.2. Changes: "This edition has NVIDIA binary drivers 44.96 and Macromedia Flash plugin installed. Aurox Live 1.2.0 contains: KDE 3.1.4 (default graphical desktop); web browsers Mozilla 1.5 and KDE's Konqueror; Office suites (KOffice 1.2.1, OpenOffice.org 1.1.0); multimedia support: sound and movie players Kaboodle, Xine (libs 1.0.0 RC2), non-accelerated games (KDE games); examples of games using hardware acceleration (Chromium, GLaxium); graphical e-mail clients (KMail, Evolution 1.4.5)..." Read the rest of the release notes.
Buffalo Linux 1.0.5
A new version of Buffalo Linux has been released: "This is a new bug-fix/update release in the 1.0.x series. Current version 1.0.5. Changes include: more cleanup of install procedure, includes patch for some hangs in AUTOSETUP. Improved integration with Codeweavers Crossover Office. Upgraded to latest version of Sylpheed (0.9.8a) mail client. Added more internal help files. Bug squashing and file cleanup." Buffalo Linux is a derivative distribution based on Vector and Slackware; it is targeted at the small business workstation market.
Damn Small Linux 0.5.2
Version 0.5.2 of Damn Small Linux has been released. From the changelog: "New for 0.5.2: mkisofs; cdrecord; bashburn (easy to use text mode CD burning utility); gTuxnes (interactive GUI for tuxness); smbclient; smbtree; a working /opt that is writable from the CD; midnight commander (many features stripped); skel now works for root when installed."
SLAX - Live CD 3.0.24
The honour of the first release of 2004 goes to SLAX - Live CD (formerly known as Slackware - Live CD), with the release of version 3.0.24 only a few hours into the new year. From the changelog: "v 3.0.24 (1th of January 2004): SLAX is the new name for Slackware-Live; now created by Linux Live scripts. Using KDE 3.2beta2 and KOffice 1.3beta2; removed quanta; configsave and configrestore doesn't work; added glut, libid3tag; added Linux kernel 2.4.23; removed printing and PDF/PS applications; sound volume is set to 88% automatically; rc.6 script modified, removed swap unmounting because of ovlfs..." Find out more on the distribution's new web site at slax.org.
Feather Linux 0.3.0 and 0.3.1
Feather Linux 0.3.1 has been released. From the distribution's changelog: "Fixed a known bug of LinNeighborhood; fixed HD install so that X starts automatically; removed mkcfm and mkfontdir, both extraneous with Kdrive; added script to save configuration to a USB pendrive and some bootup code to restore it." Feather Linux is a light-weight desktop Linux distribution based on Knoppix.
CRUX 1.3 (PowerPC edition)
A PowerPC edition of CRUX 1.3 is now available for download: "Port for PowerPC platform of CRUX 1.3. Uses kernel 2.4.23-ben1 with improved support for iBook G4 PowerMAC G5 and CPU Frequency Scaling. The distribution is source-based and uses the same ports tree from CRUX Linux Community available for CRUX x86." The project's web site has more information about the release (in Italian).
|Upcoming Releases and Announcements
Klaus Knopper has published information about the upcoming releases of the Knoppix live CD, with an updated version 3.3 expected this week and a brand new version 3.4 with kernel 2.6 before the end of March: "Preliminary release plan: update to Kernel 2.4.23 for the download edition of Knoppix 3.3, should be finished next week. ... Parallel working on version 3.4 with some major changes: switching to ISOLinux plus a 2 floppy boot option in order to allow inclusion of more drivers in the kernel and initrd (USB and Firewire, possibly), since the space on the 1.44 MB floppy is used up by the kernel 2.6 alone." Read the rest of the plan on the developers' mailing list.
|Web Site News
New on the waiting list
Removed from the waiting list
- Litrux. "What is Litrux? Litrux is a brand new Linux distribution, running completely from CD. No installation needed, just boot from CD. It automatically recognizes all supported types of network cards, graphic cards, sound cards, SCSI devices and other hardware devices."
- Lineox Enterprise Linux. "Lineox Enterprise Linux 3.0 contains all freely distributable packages from Red Hat Enterprise Linux 3.0 Advanced Server ($1499), Red Hat Cluster Suite ($499), and Red Hat Developer Suite (free as an introductory offer for RHEL subscribers). Lineox Enterprise Linux 3.0 does not contain any support. Lineox is however preparing a separately offered program package update option. Support option pricing and availability will be announced later."
- Rocks Cluster Distribution. Rocks is a specialist Linux distribution designed for clustering and cluster management.
- Routix. Routix is a Linux-based distribution for routers (web site in German).
- Vermillion. Vermillion is a custom Linux distribution based on Red Hat Linux.
- KANOTIX is a new Linux live CD based on Knoppix.
- Fermi Linux is a Linux distribution based on Red Hat Linux.
- LIVUX is a new Linux live CD based on Knoppix (web site in Spanish).
- The Dave/Dina Project. "The Dave/Dina Project was created to satisfy all the home entertainment needs of the average hacker. A Dave/Dina box is a computer connected to your TV screen, stereo, phone, and other stuff, running open-source software."
- Bluewall GNU/Linux. "Bluewall is a GNU/Linux distribution that allows you to install a system from a small set of preconfigured binary packages based on Debian Linux. Bluewall doesn't have any specific installation procedure, the idea behind it is that you can get installed Linux in the way you want, using command line tools."
DistroWatch database summary
- Zynot Linux. Zynot was a high-profile Gentoo fork when it started over 6 months ago, but now it seems to concentrate on development of embedded Linux solutions, rather than a general purpose distribution. As such, Zynot has been listed under Embedded Linux Distributions on the links page. Please let me know if my conclusion is incorrect.
- Momonga Linux. This is one of those never ending development projects, sprouted from the ashes of the discontinued Kondara MNU/Linux in July 2002. But despite its having been around for over 16 months and a promised final release by October 2002, we have yet to see any release.
- Number of distributions in the database: 230
- Number of discontinued distributions: 26
- Number of distributions on the waiting list: 66
On Turbolinux's TurboUpdate
"Turbolinux update utility seems to try to go to ftp.turbolinux.com. It has been down since I purchased the desktop 10D two weeks ago. Just thought I'd let someone know."
I have Turbolinux 10D installed and have had no problems using the TurboUpdate program to download and install all updates since the product release. Is there anybody else having the same problem as the reader above?
That's all for this week, see you next Monday :-)
|Linux Foundation Training
|• Issue 841 (2019-11-18): Emmabuntus DE3-1.00, changing keys in a keyboard layout, Debian phasing out Python 2 and voting on init diversity, Slackware gets unofficial updated live media|
|• Issue 840 (2019-11-11): Fedora 31, monitoring user activity, Fedora working to improve Python performance, FreeBSD gets faster networking|
|• Issue 839 (2019-11-04): MX 19, manipulating PDFs, Ubuntu plans features for 20.04, Fedora 29 nears EOL, Netrunner drops Manjaro-based edition|
|• Issue 838 (2019-10-28): Xubuntu 19.10, how init and service managers work together, DragonFly BSD provides emergency mode for HAMMER, Xfce team plans 4.16|
|• Issue 837 (2019-10-21): CentOS 8.0-1905, Trident finds a new base, Debian plans firewall changes, 15 years of Fedora, how to merge directories|
|• Issue 836 (2019-10-14): Archman 2019.09, Haiku improves ARM support, Project Trident shifting base OS, Unix turns 50|
|• Issue 835 (2019-10-07): Isotop, Mazon OS and, KduxOS, examples of using the find command, Mint's System Reports becomes proactive, Solus updates its desktops|
|• Issue 834 (2019-09-30): FreedomBox "Buster", CentOS gains a rolling release, Librem 5 phones shipping, Redcore updates its package manager|
|• Issue 833 (2019-09-23): Redcore Linux 1908, why Linux distros are free, Ubuntu making list of 32-bit software to keep, Richard M Stallman steps down from FSF leadership|
|• Issue 832 (2019-09-16): BlackWeb 1.2, checking for Wayland session and applications, Fedora to use nftables in firewalld, OpenBSD disables DoH in Firefox|
|• Issue 831 (2019-09-09): Adélie Linux 1.0 beta, using ffmpeg, awk and renice, Mint and elementary improvements, PureOS and Manjaro updates|
|• Issue 930 (2019-09-02): deepin 15.11, working with AppArmor profiles, elementary OS gets new greeter, exFAT support coming to Linux kernel|
|• Issue 829 (2019-08-26): EndeavourOS 2019.07.15, Drauger OS 7.4.1, finding the licenses of kernel modules, NetBSD gets Wayland application, GhostBSD changes base repo|
|• Issue 828 (2019-08-19): AcademiX 2.2, concerns with non-free firmware, UBports working on Unity8, Fedora unveils new EPEL channel, FreeBSD phasing out GCC|
|• Issue 827 (2019-08-12): Q4OS, finding files on the disk, Ubuntu works on ZFS, Haiku improves performance, OSDisc shutting down|
|• Issue 826 (2019-08-05): Quick looks at Resilient, PrimeOS, and BlueLight, flagship distros for desktops,Manjaro introduces new package manager|
|• Issue 825 (2019-07-29): Endless OS 3.6, UBports 16.04, gNewSense maintainer stepping down, Fedora developrs discuss optimizations, Project Trident launches stable branch|
|• Issue 824 (2019-07-22): Hexagon OS 1.0, Mageia publishes updated media, Fedora unveils Fedora CoreOS, managing disk usage with quotas|
|• Issue 823 (2019-07-15): Debian 10, finding 32-bit packages on a 64-bit system, Will Cooke discusses Ubuntu's desktop, IBM finalizes purchase of Red Hat|
|• Issue 822 (2019-07-08): Mageia 7, running development branches of distros, Mint team considers Snap, UBports to address Google account access|
|• Issue 821 (2019-07-01): OpenMandriva 4.0, Ubuntu's plan for 32-bit packages, Fedora Workstation improvements, DragonFly BSD's smaller kernel memory|
|• Issue 820 (2019-06-24): Clear Linux and Guix System 1.0.1, running Android applications using Anbox, Zorin partners with Star Labs, Red Hat explains networking bug, Ubuntu considers no longer updating 32-bit packages|
|• Issue 819 (2019-06-17): OS108 and Venom, renaming multiple files, checking live USB integrity, working with Fedora's Modularity, Ubuntu replacing Chromium package with snap|
|• Issue 818 (2019-06-10): openSUSE 15.1, improving boot times, FreeBSD's status report, DragonFly BSD reduces install media size|
|• Issue 817 (2019-06-03): Manjaro 18.0.4, Ubuntu Security Podcast, new Linux laptops from Dell and System76, Entroware Apollo|
|• Issue 816 (2019-05-27): Red Hat Enterprise Linux 8.0, creating firewall rules, Antergos shuts down, Matthew Miller answers questions about Fedora|
|• Issue 815 (2019-05-20): Sabayon 19.03, Clear Linux's developer features, Red Hat explains MDS flaws, an overview of mobile distro options|
|• Issue 814 (2019-05-13): Fedora 30, distributions publish Firefox fixes, CentOS publishes roadmap to 8.0, Debian plans to use Wayland by default|
|• Issue 813 (2019-05-06): ROSA R11, MX seeks help with systemd-shim, FreeBSD tests unified package management, interview with Gael Duval|
|• Issue 812 (2019-04-29): Ubuntu MATE 19.04, setting up a SOCKS web proxy, Scientific Linux discontinued, Red Hat takes over Java LTS support|
|• Issue 811 (2019-04-22): Alpine 3.9.2, rsync examples, Ubuntu working on ZFS support, Debian elects new Project Leader, Obarun releases S6 tools|
|• Issue 810 (2019-04-15): SolydXK 201902, Bedrock Linux 0.7.2, Fedora phasing out Python 2, NetBSD gets virtual machine monitor|
|• Issue 809 (2019-04-08): PCLinuxOS 2019.02, installing Falkon and problems with portable packages, Mint offers daily build previews, Ubuntu speeds up Snap packages|
|• Issue 808 (2019-04-01): Solus 4.0, security benefits and drawbacks to using a live distro, Gentoo gets GNOME ports working without systemd, Redox OS update|
|• Issue 807 (2019-03-25): Pardus 17.5, finding out which user changed a file, new Budgie features, a tool for browsing FreeBSD's sysctl values|
|• Issue 806 (2019-03-18): Kubuntu vs KDE neon, Nitrux's znx, notes on Debian's election, SUSE becomes an independent entity|
|• Issue 805 (2019-03-11): EasyOS 1.0, managing background services, Devuan team debates machine ID file, Ubuntu Studio works to remain an Ubuntu Community Edition|
|• Issue 804 (2019-03-04): Condres OS 19.02, securely erasing hard drives, new UBports devices coming in 2019, Devuan to host first conference|
|• Issue 803 (2019-02-25): Septor 2019, preventing windows from stealing focus, NetBSD and Nitrux experiment with virtual machines, pfSense upgrading to FreeBSD 12 base|
|• Issue 802 (2019-02-18): Slontoo 18.07.1, NetBSD tests newer compiler, Fedora packaging Deepin desktop, changes in Ubuntu Studio|
|• Issue 801 (2019-02-11): Project Trident 18.12, the meaning of status symbols in top, FreeBSD Foundation lists ongoing projects, Plasma Mobile team answers questions|
|• Issue 800 (2019-02-04): FreeNAS 11.2, using Ubuntu Studio software as an add-on, Nitrux developing znx, matching operating systems to file systems|
|• Issue 799 (2019-01-28): KaOS 2018.12, Linux Basics For Hackers, Debian 10 enters freeze, Ubuntu publishes new version for IoT devices|
|• Issue 798 (2019-01-21): Sculpt OS 18.09, picking a location for swap space, Solus team plans ahead, Fedora trying to get a better user count|
|• Issue 797 (2019-01-14): Reborn OS 2018.11.28, TinyPaw-Linux 1.3, dealing with processes which make the desktop unresponsive, Debian testing Secure Boot support|
|• Issue 796 (2019-01-07): FreeBSD 12.0, Peppermint releases ISO update, picking the best distro of 2018, roundtable interview with Debian, Fedora and elementary developers|
|• Issue 795 (2018-12-24): Running a Pinebook, interview with Bedrock founder, Alpine being ported to RISC-V, Librem 5 dev-kits shipped|
|• Issue 794 (2018-12-17): Void 20181111, avoiding software bloat, improvements to HAMMER2, getting application overview in GNOME Shell|
|• Issue 793 (2018-12-10): openSUSE Tumbleweed, finding non-free packages, Debian migrates to usrmerge, Hyperbola gets FSF approval|
|• Issue 792 (2018-1203): GhostBSD 18.10, when to use swap space, DragonFly BSD's wireless support, Fedora planning to pause development schedule|
|• Issue 791 (2018-11-26): Haiku R1 Beta1, default passwords on live media, Slax and Kodachi update their media, dual booting DragonFly BSD on EFI|
|• Issue 790 (2018-11-19): NetBSD 8.0, Bash tips and short-cuts, Fedora's networking benchmarked with FreeBSD, Ubuntu 18.04 to get ten years of support|
|• Issue 789 (2018-11-12): Fedora 29 Workstation and Silverblue, Haiku recovering from server outage, Fedora turns 15, Debian publishes updated media|
|• Full list of all issues|
Star Labs - Laptops built for Linux.
View our range including the Star Lite, Star LabTop and more. Available with a choice of Ubuntu, Linux Mint or Zorin OS pre-installed with many more distributions supported. Visit Star Labs for information, to buy and get support.
|Random Distribution |
Voodoo Linux employs a customized version of the Red Hat Anaconda installer with enhanced hardware support and the Ext3 Journaling file system. Our focus has been to implement our own Windows(r) API layer, to seamlessly use Windows(r) based applications. We understand that the majority of new Linux users have investments in such applications and to make the switch to Linux easier we have come up with a working way to get this done. So don't give away your Windows software just yet!