Download List

Project Description

Owl (Openwall GNU/*/Linux) is a small security-enhanced Linux distribution for servers. Owl also makes a good base system for customized virtual machine images and embedded systems, and Owl live CDs with remote SSH access are good for recovering or installing systems (whether with Owl or not). A single Owl CD includes the full live system, installable packages, the installer program, as well as full source code and the build environment capable of rebuilding the entire system from source. Owl supports multiple architectures (x86, x86-64, SPARC, and Alpha) and offers some compatibility for packages developed for other Linux distributions. The primary approaches to security are proactive source code review, privilege reduction, privilege separation, careful selection of third-party software, safe defaults, and "hardening" to reduce the likelihood of successful exploitation of security flaws.

System Requirements

System requirement is not defined
Information regarding Project Releases and Project Resources. Note that the information here is a quote from Freecode.com page, and the downloads themselves may not be hosted on OSDN.

2011-03-13 18:27
3.0-stable-20110312

Since the 3.0 release, a Vim packaging error has been corrected, a vulnerability in the patch(1) program (CVE-2010-4651) and two vulnerabilities in OpenSSL (CVE-2010-4180, CVE-2009-0590) have been fixed, vsftpd has been updated to 2.3.4 (which fixes CVE-2011-0762), and patchutils was updated to 0.3.2.
Tags: Stable

2011-02-13 15:49
current-20110212

The kernel has been updated to OpenVZ's latest from their "RHEL5 testing" branch (-238.1.1.el5.028stab084.3), with the usual changes. A vulnerability in patch(1) has been fixed (CVE-2010-4651). The usb_modeswitch package has been added (along with usb_modeswitch-data and libusb-compat). New ISO images and OpenVZ container templates have been generated.
Tags: Development

2011-02-07 11:50
current-20110205

A move from RHEL 5.5-based to 5.6-based Linux/OpenVZ kernels has been made, support for non-raw ICMP sockets has been added to the kernel and made use of in ping (avoiding SUID root or capability), new packages have been added (ethtool, pv (Pipe Viewer), bridge-utils, libusb1, usbutils, and vconfig), Nmap, e2fsprogs, and LILO have been updated to the latest upstream versions, Nping has been enhanced to drop privileges, and other enhancements and corrections have been made. New ISO images and OpenVZ container templates have been generated.
Tags: Development

2010-12-16 11:55
3.0

Upgrades were improved and some security fixes were added to Perl. Since the last stable release, x86-64 architecture support, the ext4 filesystem, and xz compression support were added, a move to RHEL 5.5'ish Linux 2.6 kernels made, with the kernel RPM'ed in a way allowing for easy non-RPM'ed builds as well. OpenVZ container-based virtualization was integrated, "make iso" and "make vztemplate" targets added, a few new packages added and lots of packages updated, hardware compatibility improved and installation made more intuitive, and many other enhancements and corrections made. New ISOs were generated.
Tags: Release, Stable

2010-12-10 18:41
current-20101209

The kernel has been updated to OpenVZ's latest "RHEL5 testing" one (2.6.18-194.26.1.el5.028stab079.1) with several additional security and reliability fixes added on top of it, including a fix for CVE-2010-4258. Many packages have been updated to new upstream versions: binutils, hdparm, ed, man-pages, diffstat, flex, ncurses, VIM, Linux-PAM, GnuPG, cdrkit, iptables, SysVinit, smartmontools, lftp, xz, and Postfix. Many minor enhancements to various Owl packages have been made. New ISO images and OpenVZ container templates have been generated for i686 and x86-64.
Tags: Development

Project Resources