Castle is a Russian server distribution created by the ALT Linux Team.
Castle is a server distribution offered by the ALT Linux Team in Russia. The software comes with installation instructions and other relevant documentation available in English, which makes it easy for users to install and configure the software.
One notable feature in Castle is the use of RSBAC security configuration. During installation, a security officer account will be created, allowing users to set up and configure the RSBAC settings. Additionally, the installer applies two special parameters to the RSBAC kernel, "rsbac_auth_enable_login" and "rsbac_softmode," which should not be removed to ensure correct installation.
After the installation process, it is crucial to run the RSBAC kernel to set it in normal mode, which will be maintained during future system startups. However, if a user needs the 'soft' mode, they can use the "rsbac_softmode" kernel parameter during boot to activate it.
The default security configuration ensures that all system directories are in 'read-only' and 'execute-only' mode, while base system configuration files like /etc/lilo.conf and /etc/fstab will be in read-only mode. Additionally, home directories are only available for users and security officers, with the officer's home directory situated in the root directory (/secoff). It is only open to the owner, who can create a trusted environment by adding special files to the directory.
Finally, Castle comes with some pre-installed scripts in the security officer's home directory. These include scripts to enable/disable useradd, install, and an example script for http protection. In summary, Castle is a secure and reliable server distribution that makes use of RSBAC security configuration to keep user data and information safe.
One notable feature in Castle is the use of RSBAC security configuration. During installation, a security officer account will be created, allowing users to set up and configure the RSBAC settings. Additionally, the installer applies two special parameters to the RSBAC kernel, "rsbac_auth_enable_login" and "rsbac_softmode," which should not be removed to ensure correct installation.
After the installation process, it is crucial to run the RSBAC kernel to set it in normal mode, which will be maintained during future system startups. However, if a user needs the 'soft' mode, they can use the "rsbac_softmode" kernel parameter during boot to activate it.
The default security configuration ensures that all system directories are in 'read-only' and 'execute-only' mode, while base system configuration files like /etc/lilo.conf and /etc/fstab will be in read-only mode. Additionally, home directories are only available for users and security officers, with the officer's home directory situated in the root directory (/secoff). It is only open to the owner, who can create a trusted environment by adding special files to the directory.
Finally, Castle comes with some pre-installed scripts in the security officer's home directory. These include scripts to enable/disable useradd, install, and an example script for http protection. In summary, Castle is a secure and reliable server distribution that makes use of RSBAC security configuration to keep user data and information safe.
What's New
Version 2.4: N/A