Openwall Community Wiki Owl

Installation

2011-07-27T20:43:31+02:00

Download Mirrors 32 Bit (i386) 64 Bit (x86_64 CD bestellen Stan…

Соглашение о правах и гарантиях

2009-06-05T19:58:37+02:00

Соглашение о правах и гарантиях Устанавливая операционную систему Openwall GNU/ * /Linux (Owl) на компьютер, вы тем самым принимаете это соглашение. Пожалуйста, внимательно ознакомьтесь с ним перед установкой.

Owl on USB drive

2014-09-17T09:55:55+02:00

Owl on USB drive Some of modern servers lack optical drives or require additional kernel modules and features to be compiled in. This article describes how to settle Owl there. How to create Owl USB Live Flash Prerequisites * Owl 3.0 or newer installation disk ISO image * Owl-compatible i686 or x86_64 machine (Qemu system emulator is ok) * At least 1Gb USB flash media

Running Owl under VirtualBox OSE

2011-12-15T16:37:28+02:00

In order to run Owl under VirtualBox OSE you should enable 'Physical Address Extension' (PAE). Error If this option is not enabled you will get an error like this: Unknown interrupt or fault at EIP 00000060 c09671f5 000071f4 To enable Select 'Machine->Settings' from the menu (or: CTRL+S). Then select 'System', then the 'Processor' tab. Finally, check/click 'Enable PAE/NX' and click 'OK'.

How to upgrade an Owl system via CVS

2011-04-24T17:26:26+02:00

Warning: for most users, this procedure is not recommended. The one we do recommend is described on the upgrade page. Warning: retrieving the Owl native tree via CVS (from the anoncvs server) is less secure than downloading native.tar.gz and verifying its integrity via Owl.mtree and Owl.mtree.sign files (you do need to verify both the tarball's message digest and the Owl.mtree file's signature!) This is because anoncvs itself is a security risk to the Openwall systems infrastructure, and henc…

Example disk partitioning schemes for Owl

2011-05-24T14:35:47+02:00

Openwall's Here's a partitioning scheme that we commonly use at Openwall: * /dev/sda1 or /dev/md0 - swap - size varies a lot depending on expected needs and available disk space to waste * /dev/sda2 or /dev/md1 - boot and root filesystem - 1 GB or 2 GB (currently, a full install needs about 500 MB) * /dev/sda3 or /dev/md2 - /space - size varies a lot depending on expected needs and on whether more partitions are created or not * /dev/sda4, /dev/sda5 (if extended partition table is crea…

Openwall GNU/*/Linux (Owl) VPS hosting

2013-06-20T01:08:43+02:00

The following hosting providers offer VPSes (Virtual Private Servers) with Owl. All of these provide full root access to the VPSes . Please feel free to add to this list as long as you reliably know that the provider you're adding offers Owl. Please include some sort of proof (of the provider offering Owl) in your wiki edit (we'll review and remove/hide this portion), or we'd have to revert your addition.

Openwall GNU/*/Linux coverage by (Linux) news sites

2015-06-20T19:03:13+02:00

Openwall GNU/*/Linux 3.1 * Threatpost: Openwall 3.1 Released With Fixes for Shellshock, POODLE Attack (English) * OpenNet: Анонсирован Openwall GNU/*/Linux 3.1-stable (Russian) Openwall GNU/*/Linux 3.0 Stories with extensive original content and/or comment threads; relevant offers English * LWN: Openwall Linux 3.0: Linux for the security-conscious, article by Koen Vervloesem - independent review of Owl 3.0, including sections on “Installation”, “No SUID programs”, “Security tools”; so…

How to build a new kernel on Owl

2011-08-13T11:09:21+02:00

All Linux vendors have their own ways and requirements to get a framework in place to build a custom kernel, and Owl is no different, though you may actually find it easier doing it “the Owl way” compared to other distributions. In the instructions below, it is assumed that you are already on Owl and that you have the default set of packages installed.

Kernel-hardening project

2012-03-25T18:15:19+02:00

The project consists of extracting security hardening changes from various patches (which the mentor will point out), forward-porting them to the latest mainstream kernels, making it easy to enable/disable the hardening measures (both compile- and runtime), adding documentation, properly submitting to and work with LKML (make proposals and own discussions to completion: either rejection or acceptance).

Owl:licenses

2011-04-01T15:56:24+02:00

End-User License Agreement for Openwall GNU/*/Linux Соглашение о правах и гарантиях (in Russian) Back to Openwall GNU/*/Linux user community resources.

NFS with Owl

2012-08-23T15:10:28+02:00

Owl currently does not officially support NFS - it does not include the corresponding userland tools such as a Sun RPC portmapper. However, recent Owl kernels are built with the required kernel modules enabled, which you may load and use at your own risk - provided that you install the userland tools from elsewhere (such as from CentOS).

Openwall GNU/*/Linux (Owl) packages

2012-05-18T20:07:19+02:00

Owl is a small security-enhanced server platform, and as such it contains little more than a bare minimum set of packages typically required on Internet servers. Owl 2.0 contains a total of 135 “source” packages (that exist as subdirectories in the source trees), which produce around 200 "binary" packages (RPMs). As of this writing, Owl-current adds a couple of packages on top of that - here are the full package lists for i686 and x86_64. Please note that when you install Owl, all of the Owl…

Getting started with pkgsrc in Owl

2011-04-24T20:22:28+02:00

Main pkgsrc page says: The NetBSD Packages Collection (pkgsrc) is a framework for building third-party software on NetBSD and other UNIX-like systems. Official manual says so and much more. I strongly encourage to read them, keep them always open, consult them in first place. Text version is located in doc/ directory of pkgsrc tree.

How to set up secure data storage with Owl

2012-07-11T12:28:24+02:00

If you have some sensitive data on your server, you most likely want to protect its' confidentiality. Using strong cryptography is one of the easiest ways to achieve that. Preparing the storage As the data is sensitive, let's use the redundant array - RAID5, which requires minimum of 3 disks. Assuming that first two disks were used to create mirrored /, /var and /home filesystems, now we'll create the /dev/md3 using /dev/sdc1, /dev/sdd1, /dev/sde1, and /dev/sdf1 (type 0xFD, equal size):

Owl security features

2011-04-01T15:57:17+02:00

Kernel Strong password cryptography FIXME What does this have to do with the kernel? Network address based access control Integrity checking Address Space Layout Randomisation (ASLR) Stack ASLR ... NX bit Mmap min address protection Module loading Userland Source code review Privileges Configuration and administration facilities ====

How to install Owl on software RAID

2016-05-29T05:36:54+02:00

Owl's installer program - settle - is not able to create software RAID devices yet, however it lets an advanced user install onto software RAID devices created via the command-line. Here's how to do it. In the following examples, we'll assume the typical use case for software RAID - installing onto two mirrored hard drives (RAID-1).

How to upgrade an installed Owl system

2011-04-24T17:38:04+02:00

Download the new stuff In the shell, run: su - build lftp http://mirrors.kernel.org/openwall/Owl/current/ To prepare for upgrading Owl-current on i686 (for example), issue the following commands to lftp: mget Owl.mtree* # downloads Owl.mtree and Owl.mtree.sign get native.tar.gz cd i686 mget i686.mtree* # downloads i686.mtree and i686.mtree.sign mirror -ev RPMS

Openwall GNU/*/Linux (Owl) tutorials and usage examples

2011-04-01T15:53:36+02:00

Using OpenVZ container-based virtualization OpenVZ is container-based virtualization for Linux. OpenVZ support has been integrated into Owl-current starting with the 2009/11/23 snapshots. * Getting started with Owl's OpenVZ support (detailed, but very easy to follow) * How to create an Owl-based OpenVZ OS template (“hackish”, somewhat outdated)