Security features of Linpus Lite 1.4

Linpus logoLinpus Lite 1.4 is the latest update to the Linux distribution published by Linpus Technologies, Inc. of Taipei, Taiwan. Though designed for use on netbooks and low-power computers, it is one of the best distributions that I have reviewed for publication on this website. It boots up real fast and shuts down even faster. It features a slick installation program (see the screenshots) and a Simple Mode interface that would make it an ideal distribution for tablet computers.

With this article, I present all the physical and network security features available on this distribution. But before we get to the security features that it has, let me list the (security) features it should, but does not have. It is a very short list:

  1. Disk encryption – Sapphire, the installation program on Linpus Lite 1.4, does not have support for setting up disk encryption – at the partition level or full disk.

Ok, now to the available security features:

Password Protection for boot loader – GRUB Legacy (version 0.97) is the bootloader used on Linpus Lite 1.4. While it is possible to password-protect GRUB, the installation program and the bootloader management tool (accessible from System > Administration > Bootloader), do not have that feature. You can still set a GRUB password. You just have to do it from the command line. The instructions are the same for all distributions that use GRUB. If you are interested, read how to password-protect GRUB.

Why is it necessary to password-protect the bootloader? Two reason (source):

  1. Prevent Access To Single User Mode — If an attacker can boot into single user mode, he becomes the root user.
  2. Prevent Access To the GRUB Console — If the machine uses GRUB as its boot loader, an attacker can use the edit the command’s interface to change its configuration or to gather information using the cat command.

The graphical bootloader management tool

grubtool
Bootloader utility

Firewall – IPTables/Netfilter is the firewall application that lives in the Linux kernel. So all Linux distributions ship with a firewall. However, not all have the firewall enabled out of the box, and fewer still ship with a graphical firewall utility to manage it. If you use Linpus Lite 1.4 or intend to use it, you are in luck; it comes with the firewall enabled and a full-featured graphical firewall management tool. Out of the box, the firewall tool is configured to allow all outgoing connections and deny all incoming connections except those that have an entry in the state table, that is, those that are related to an outgoing connection.

linpusfirewall
Graphical firewall manager on Linpus Lite 1.4

The firewall manager allows you to specify what interfaces to grant full access to the system, that is, what interfaces to trust.

firewalltool
Trusted interfaces

It also allows you to set up Masquerading. If your computer is sitting behind a high-speed modem/router, this is one feature you will not need to worry about.

firewalltool2
Masquerading

Related Posts

GNOME 3.12: The cool and the not-so cool features GNOME 3.12 was released on March 26 (2014), but it didn't start shipping on many distributions until very recently. In this post, I'll let you in on w...
Manual disk partitioning guide for Kubuntu 11.04 Like the Ubuntu 11.04 installer, the Kubuntu 11.04 installation program configures just two partitions by default. These are for /, the root directory...
Fedora 13 review Fedora 13 is the latest update to the Redhat-sponsored, RPM-based Linux distribution. It has long held a reputation of being a testbed for features t...
PC-BSD’s graphical firewall manager PC-BSD is a desktop-oriented, FreeBSD-based distribution with KDE as the default desktop environment. The version due to be released shortly is PC-BSD...
Configurable mintMenu stops working after upgrading to Linux Mint 17.2 Configurable Menu is a Cinnamon Menu I installed on my desktop installation of Linux Mint 17.1, which I just upgraded to Linux Mint 17.2. It's a menu ...
How to make Fedora 17 more user-friendly with easyLife Because of the philosophical stance of the Fedora project's team, a default installation of Fedora 17 requires a lot more tweaking than other distribu...

We Recommend These Vendors

Launch an SSD VPS in Europe, USA, Asia & Australia on Vultr's KVM-based Cloud platform starting at $5:00/month (15 GB SSD, 768 MB of RAM).

Deploy an SSD Cloud server in 55 seconds on DigitalOcean. Built for developers and starting at $5:00/month (20 GB SSD, 512 MB of RAM).


2 Comments

  1. Pingback: Linux News » Security features of Linpus Lite 1.4

  2. Pingback: Links 30/9/2010: GNU/Linux Growth in Data Centres, XtreemOS Opening Up | Techrights

Leave a Comment

Your email address will not be published. Required fields are marked *

*