Security measures: Linux vs BSD

I hear a lot of discussion about how superior Linux is to Microsoft's operating systems. Certainly, there are many more attacks targeting Windows and IIS platforms.

A good case can also be made that Linux is inherently more stable and secure than Microsoft products, either because it's based on a better core of code or because it's open source, and many individuals have a stake in monitoring and making repairs.

However, with all this discussion, there rarely seems to be any mention of an even more secure and completely free version of UNIX: BSD. While Linux is the darling of the hacker set, it is far from the least expensive or even the most secure open source operating system available. Linux isn't even running on the widest range of systems. All three of those distinctions belong to an academically developed version of UNIX that originated at the University of California, Berkeley and whose various versions are often referred to collectively as BSD (Berkeley Software Distribution).

Linux vs. BSD

Linus Torvalds' Linux is quite a youngster compared to BSD. At two decades of age, BSD is as old as the PC and was running in universities back when Bill Gates was famous for MS-DOS.

So you may well ask, -If BSD's so great, why aren't more people using it?" There are a variety of reasons, although none of them is related to the quality of the operating system itself. One reason users tend to favor Linux over BSD is cultural. Linux is a hacker's delight. The hacker community latched onto it in part because it was good and also because of the mythos surrounding its development: Shut a lone Finnish hacker in a room with a computer for a few months and out pops a major operating system! That's as much urban myth as truth, but Torvalds is directly responsible for creating and making Linux available and should get a great deal of credit for his hard work.

But while the origin of Linux has a bit of hacker romance, BSD comes directly from the academic community and its development is tied more closely to computer science departments than the freewheeling exchange of hackers. When companies started hiring hackers to install and manage the Internet, they naturally turned to their old friend Linux rather than the hidebound (in their view) BSD.

Another reason Linux has become so popular is that a number of enterprising individuals and companies have found that there's money to be made selling Linux distributions and support services. Without Red Hat and other Linux distributors, who have made it easier to install and have added some shrink-wrapped packaging acceptable to corporate management, Linux would probably have been a mere blip on the corporate landscape.

Linux also owes a major debt to BSD, which took on AT&T (Bell Labs invented UNIX) in a major battle over licensing the operating system. The battle between AT&T and BSD supporters hurt both UNIX and BSD, leaving the field wide open for Linux development and marketing.

However, even though Linux has received a lot more attention than BSD, that doesn't mean that BSD has been ignored. A number of large organizations have quietly built their empires on the BSD core, including Yahoo. Some major IBM systems even rely on BSD.

BSD distributions

We're going to take a quick look at three major BSD-licensed UNIX versions: OpenBSD, NetBSD, and FreeBSD. All three can be downloaded from the Internet for free and have no restrictions on their use. In fact, the BSD open source license is even more -open" than the GPL that governs Linux. Of course, most people will pay something for even these operating systems if they want to avoid long downloads. After all, a two-CD set containing OpenBSD costs just $30, and you can make all the copies you want and install it on as many systems as you choose.

If you're looking for a highly secure OS, then you need look no further than OpenBSD, which is probably the most secure operating system ever developed. If that seems a far-fetched claim, just remember that it's been four years since a major (or even minor) remote access hole was discovered in the default installation.

If you have a wide variety of obscure systems and want to support the same OS across all of them, check out NetBSD, which runs on nearly 70 platforms from Algor to VAX to Walnut.

But both OpenBSD and NetBSD owe their major claim to fame (strong security or near-universal platform compatibility) in part to having a relatively restricted set of features. You can do a great deal with either operating system, but if you want a lot of bells and whistles, you should consider FreeBSD. This is an Intel platform OS with lots of developers dedicated to making your life easier.

Summing up

If relying on Microsoft products to secure your company scares you, and management is beginning to ask you about this -new" Linux thing it's been hearing about, why not take advantage of management's open-mindedness and try to steer it to one of the free versions of BSD UNIX instead? If you need a selling point, just point out that there are no license fees, so your organisation won't have to track all that software inventory that's necessary when you have to pay for every copy you install on a new computer.

TechRepublic is the online community and information resource for all IT professionals, from support staff to executives. We offer in-depth technical articles written for IT professionals by IT professionals. In addition to articles on everything from Windows to e-mail to fire walls, we offer IT industry analysis, downloads, management tips, discussion forums, and e-newsletters.

©2001 TechRepublic, Inc.

Advertisement

Talkback 38 comments

    Article written by a BSD suppo ...Anonymous -- 13/12/01

    Article written by a BSD supporter

    BSD is great for servers and for servers only.
    None of the BSDs is any good for desktop work.

    Mandrake and SuSE Linux are comparable to Windows in regards to usability.

    Relating to security, the September and October releases of Mandrake, SuSE and Redhat are on par with FreeBSD.
    Nothing comes close to OpenBSD.
    Then again OpenBSD is useless as a desktop operating system.

    Furthermore, Linux' development is excellerating while BSDs seems steady.

    "If you’re looking for a ...Anonymous -- 14/12/01

    "If you’re looking for a highly secure OS, then you need look no further than OpenBSD, which is probably the most secure operating system ever developed."

    Not quite. That honor belongs to OpenVMS. No such thing as a buffer overflow exploit there. Number of security holes since its release in the late 70's is quite small, and there hasn't been a new one in years.

    Some might argue that this is due to "security through obscurity" but that is not the case. Accounts on VMS systems are available at just about any University, free hobbyist licenses are available, and the source code listings are available (for a fee).

    BSD was not always free, which ...Anonymous -- 14/12/01

    BSD was not always free, which is really the biggest reason all those real hackers set out to write GNU/Linux. Part of the AT&T settlement included the provision that BSD remove all original UNIX source code, so major parts of the OS had to be rewritten from scratch. Older versions were tained by non-free source code,
    which you legally had to have an AT&T licence to run. Besides that, much of the UCB code had a provision that you had to put a little ad for the University on products (like IE has in Help|About... for NCSA), but it was rescinded in 1999.

    Mr Cantrell, Ever heard of Mac ...Anonymous -- 14/12/01

    Mr Cantrell,

    Ever heard of MacOS X, based on FreeBSD?

    Now compare that to KDE or Gnome!

    stick to the facts please!

    SE Linux blows the doors off o ...Tracy R Reed -- 14/12/01

    SE Linux blows the doors off of OpenBSD when it comes to security. www.nsa.gov/selinux

    To Tracy: If selinux blows th ...Anonymous -- 14/12/01

    To Tracy:
    If selinux blows the doors of OpenBSD, I guess trustedBSD blows the doors of selinux.
    http://www.trustedbsd.org/

    To Joshau Daniel Franklin: USL ...Anonymous -- 15/12/01

    To Joshau Daniel Franklin:

    USL settlement resulted on 6 files removed from
    the BSD code, this is hardly all Unix code that was
    there. These were key components of the system,
    true, but they were removed not because it was
    "Unix code". The goal was to slow down BSD
    development so that it will not become viable
    commercial alternative to USL's own offerings.
    As we see, they succeeded only partly.

    Whoops! Here we go with the O ...Anonymous -- 15/12/01

    Whoops! Here we go with the OTHER religious war... Windows Versus Mac, Windows Versus Linux neither holds a candle to this one... Berkley versus System V derivitives... Everyone Duck and Cover!

    I have to completely disagree ...Anonymous -- 15/12/01

    I have to completely disagree with Jason, on BSD not being suitable as a desktop OS. Mind you, that isn't their focus, unlike Linux. Their focus is server end, and stability - FreeBSD that is.

    SELinux, lol. www.trustedbsd. ...Anonymous -- 15/12/01

    SELinux, lol.

    www.trustedbsd.org, now in FreeBSD 5.0-current. Then, imagine that gets ported to OpenBSD. Or, of course if OpenBSD doesn't want to, then someone can fork() -> Trusted-OpenBSD. mmmmmm

    Great article! I'm gonna be re ...Anonymous -- 15/12/01

    Great article! I'm gonna be replacing quite a few Linux boxes for one of our clients soon as they're too resource intensive, and not very reliable - FreeBSD here. Firewall of course will be OpenBSD. NetBSD, well, it's a great OS and all, but I'll wait to get an XBox before I use NetBSD some more. ;)

    Lightweight Content For Pointy ...Anonymous -- 15/12/01

    Lightweight Content For Pointy-haired Bosses.

    The article is typical lightweight "Introduction To Freeware OS Choices -001" of the type managment likes to read believing They Have Been Enlightened, and the press likes to print because they can knock-em out cheap. The article says little more than, "Security, Linux, NetBSD, OpenBSD, FreeBSD" and nothing to back up the statements used as glue.

    Is amusing to see how easy it is to rile the Linux Lovers. Clearly the whole world is a conspiracy against Linux.

    I used to be a Linux user, but got tired of being used by Linux. Is not my goal to make a career of babysitting computers, if it was I'd pursue a MCSE as those systems need constant attention. Linux was not much better.

    Lots of opportunity to play with Linux. It needs a lot of attention "to get it right". Just didn't "cut it" when it came do getting real work done and earning a living. An situation where FreeBSD was easily able to perform in addition to the SGI Irix and Sun Solaris machines I had at the time.

    Of particular note FreeBSD has always supported files greater than 2GB (which I had to have even back in 1996). Eventually there were a number of patchkits for Linux offering the same, but which one? None got all the details right. Meanwhile there are about a million different filesystem formats for Linux but none are mature and robust.

    Linux has always had time to run off and do smething new. But never had enough time to stick around until they got it right.

    It Can So! Don't say that BSD ...Anonymous -- 15/12/01

    It Can So!

    Don't say that BSD cannot be used on the desktop--that is pure bullshit. Have you even 'used' any of the *BSD's before? Cause I'm tired of linux zealots making assumptions about BSD based upon what they've heard (and not experienced).

    I'm running OpenBSD as my desktop OS right now--I've said it before and I'll say it again--most things not 'specifically' written for linux 'usually' compile fine on *BSD.

    FreeBSD is likely the best BSD for desktop use (wasn't compatible with my hardware though).

    "If you need a selling po ...Anonymous -- 15/12/01

    "If you need a selling point, just point out that there are no license fees, so your organisation won’t have to track all that software inventory that’s necessary when you have to pay for every copy you install on a new computer."

    hmmmmm the author must have forgotten that you can get any Linux Distrobution off the internet for FREE as well with all the above things mentioned.....don't believe me www.linuxiso.org

    Real security is achieved thro ...Anonymous -- 16/12/01

    Real security is achieved through proactive administration - not default installs. Any system that runs misconfigured, unesessary or ill-written software or, is not patched immediately when problems are discovered is a security problem. OpenBSD is secure because they not only exhaustively audit the code, they also don't "turn everything on". On the other hand, most Linux distro's default install includes *everything* lol although this is improving. In the hands of a newbie, these machines are sitting ducks. (run netstat -a on a default Redhat install, then do it on an OpenBSD ;-) When patched properly even Windows is reasonably secure - the only problem there is that you have to do it more often and wait longer for the patches and pay more for it ;-) Oh, and to the poster who says BSD sucks as a desktop OS, my DESKTOP of choice is KDE running on X whether it be run on FreeBSD, Linux or whatever. Neither Linux nor BSD is a desktop.

    He, lol selinux is the best jo ...Anonymous -- 16/12/01

    He, lol selinux is the best joke i have ever heard. It consumed a lot of money and time, while nasa decides to use openbsd for many security issues, and government founds (partially) the development of trustedbsd up to freebsd -current.

    Time will always make its job and with unix will not be different. Check out, how many "advanced" (or the called gurus) linux users have switched their systems to bsd? The ones who havent (yet?) are complaining on linux development " why it doesnt work this way or another like bsd". Check for Rik Van Riel's efforts on linux VM. He studies BSD way of doing things and tries to "fix" the linux way (at least in this topic). And blah blah blah else could be said, but i am sorry for the linux enthusiastics who are not smart enough to naturally evolute. Bu we all thank u for the open source marketing anyway.

    LiquidFX wrote: "hmmmmm t ...Joseph Garcia -- 16/12/01

    LiquidFX wrote:
    "hmmmmm the author must have forgotten that you can get any Linux Distrobution off the internet for FREE as well with all the above things mentioned.....don't believe me www.linuxiso.org"

    Gee, interesting enough that would a great site to find FreeBSD and NetBSD iso's as well. ;)

    Also, I should note that KDE 2.2.2 runs great on FreeBSD. :) Now, I just have to learn how to usge gnucash, and all the other useful desktop aapplications.

    Like it takes 3 BSDs to equal ...timothy covell -- 16/12/01

    Like it takes 3 BSDs to equal 1 Linux. OpenBSD's
    security comes from greater auditing, but Linux's
    security comes from real innovative thinking such as found in SE-Linux, LSM, Vserver, Astaro,
    Immunix, etc. {Sorry if this is a repost but
    your braindead email address checker didn't accept my FQDN with a trailing ".", which is BTW,
    the official RFC standard put forward by John Postel because Mr. Postel was smart.)

    Who cares about Linux vs BSD w ...Anonymous -- 16/12/01

    Who cares about Linux vs BSD when Windows got 90% of the market.

    What's this gotta do with the ...FrdPrefct -- 17/12/01

    What's this gotta do with the security between Linux and BSD? I see VERY little discussion about that.

    Brothers and sisters, make lov ...sad -- 17/12/01

    Brothers and sisters, make love not war.

    Linux and the *BSD systems are the *best* unix systems you can get to date.
    They both have the same kwalities being - open source. And that should be the only thing that counts. I don't care what license they use, the source has to be available to all.
    That is why we have these 4 great Operating Systems...
    Just go with the one you are most comfortable with.

    Ofcourse, if you are talking more critical systems i guess it will be easier to get linux into your company because all the support that has been available. but that is just a side note. (yeah right)

    It amazes me how quickley the ...Rev. Jonathan T Sage -- 17/12/01

    It amazes me how quickley the flame war starts yet again between the BSD's and linux. MR. Cantrell made a underinformed point, but did succede in (after many flame-like follow-ups) in noting that both Linux and BSD are, as a rule, pretty stable. They are both viable desktops as well. As far as the cabilities to serve, I would love to see some day a benchmark on identical hardware, with a out-of-the-box configuration using identical 3rd party software (instead of matching apache on BSD vs. a Linux kernel web server). What amazes me most, is that people fail to realize that it is only the very hard work between the groups of people working on Linux and BSD that give the rest of us a choice that is not Microsoft. They give us a desktop we don't need to reboot every few hours. They give us a server we don't need to reboot weekly. They allow us to run a medium traffic server on hardware that microsoft does not even support anymore. Lets try not to forget this. Perhaps if for once the members of these two factions worked together to promote open source, the uneducated end-consumer would be aware that they don't need to watch thier computer freeze on a daily basis.

    ~Jon (http://www.wisefreebsd.org)

    Children! Really! Calm yoursel ...Ewing Caldwell -- 17/12/01

    Children! Really! Calm yourselves.

    Linux NEEDS the BSDs and the BSDs NEED Linux.

    Linux is a wonderfully powerful, capable and
    versatile system which owes a lot to the BSDs,
    not least its solid and stable tcp/ip stack.
    There are many things Linux does very well and
    there are some things Linux does not do quite
    so well.

    The BSD systems are wonderfully powerful, capable and versatile systems which owe a lot to
    Linux, not least the modern, convenient, flexible, and highly useful desktop environments
    of KDE and GNOME. There are many things the BSDs
    do very well and there are some things they do not do quite so well.

    If you take the trouble to install and use some
    of each, you will discover for yourselves the
    highly complementary natures of these systems.
    I use Linux (several distributions), FreeBSD and
    OpenBSD all on the same network and each for a
    particular purpose that just happens to suit that
    system best. Instead of flaming other's suggestions, try them all out and see for yourselves that they work best TOGETHER, not solo!
    Perhaps that's because the two development
    communities are so tightly interwoven. Whatever
    it is, Linux and the BSDs need each other. There
    is a certain "competitive tension" and the differences between them lend an impetus to the
    appearance and development of new ideas. This is
    true innovation---not the copying, extension and
    suffocation that a certain organisation calls
    innovation. (Their only innovation is a novel
    interpretation of North American Law as it pertains to business, but that's another story.).

    Each owes the other a large and growing debt. Each has a lot to offer and each is rather nicely complementary to the others! Get the
    full power of Open Source by getting to know the
    strong and the weak points of Linux, and the BSDs. You will certainly not regret it.

    BSD as a Workstation I noticed ...Anonymous -- 17/12/01

    BSD as a Workstation

    I noticed someone above mentioned that BSD basically stinks as a workstation, so.. here I am to make a few comments in FreeBSD's defense.

    FreeBSD works great a workstation. It runs X, KDE, Gnome, StarOffice, Licq, Gimp, etc. If you want Linux compatibility, put the Linux libraries in. As for installing the OS or other packages, /stand/sysinstall is a nice menu system that takes care of all that, which makes installing FreeBSD *MUCH* easier than installing RedHat. And on the subject of installing it, you can buy the FreeBSD CDs, or download it (even in ISO format) from ftp.freebsd.org (You don't need a seperate "www.freebsd-iso.whatever" for the ISOs).

    Now for the big question of how I know that it works great as a workstation... I got sick of the problems with Winblows, so I've been running it as one for the past year. I'm not some unix guru or anything.. when I started I knew basic shell commands, pico and how to compile programs.
    But FreeBSD has not given me one problem in the past year. I've filled my /usr partition 3 times, deleted a ton of stuff off of it, and my fragmentation level is still at 0.01%.. and it runs just as good as the day I installed it.

    So, if you're someone that might be interested in trying it out.. by all means, go for it. It's free, so it isn't going to hurt anything if you don't like it.

    Open source hurts business I a ...Anonymous -- 17/12/01

    Open source hurts business

    I am getting sick and tired of the open source community, they have caused my business to loose revenue.

    What they don't seem to realise is that open source costs money (lost revenue).

    Businesses operating in the value added market have employees to pay. If software is given away for free than these employees are the ones suffering the most, in worst cases unemployment.

    "... Linux ... is far fro ...Anonymous -- 18/12/01

    "... Linux ... is far from the least expensive or even the most secure open source operating system available." What is this supposed to mean?

    Is the author talking free as in money or free as in freedom?

    If money, how can you get cheaper than $0.00? (Free downloads of RedHat, SuSE, and other major distros.) Is somebody somewhere paying customers to use an OS? Hardly.

    If the author is talking freedom, then he is trying to stir up the eternal flamewar about which license is better, GPL or BSD, without adding anything of substance to the discussion. Is TechRepublic trolling for web hits, hmmm?

    I agree with several of the other posters: Where is the discussion of Linux vs. BSD security? There is precious little meat here....

    I'm sick and tired of all thes ...Anonymous -- 18/12/01

    I'm sick and tired of all these automobiles! My horse and buggy business lost money when all these cars showed up!

    In response to Jason Cantrell' ...Anonymous -- 18/12/01

    In response to Jason Cantrell's post, "Article written by a BSD supporter", I'd like to point out how wrong Mr. Cantrell is.
    For starters, let me say I have been using FreeBSD for the last 3 years. I use it as a desktop operating system. It does everything that my windows machines do: I can browse the web, play mp3s and cd's, copy files to my usb mp3 player, even play games. In fact, since FreeBSD has linux emulation, it can run virtually anything written for linux. I am a web developer my profession, and all the IDE's I use work fine in FreeBSD.
    On terms of security, I would not call any Linux distribution "on par" with FreeBSD. You can reference many security websites, such as SecurityFocus.com, and find daily security issues with Linux. And considering that OpenBSD shares much of the same codebase as FreeBSD, I simply have to say that Jason's statement, "Then again OpenBSD is useless as a desktop operating system.", only shows that he has either no knowledge whatsoever of OpenBSD or has never tried to use it for desktop purposes.
    And although I find it hard to measure development for either OS, FreeBSD has regular, set release dates; Linux seems to release distros at odd intervals, and several times a major release has come out with glaring holes.

    Perhaps Mr. Cantrell should do more research on the BSD flavors of UNIX.

    To: John McCormick I dont know ...Anonymous -- 19/12/01

    To: John McCormick

    I dont know why, but when I read the title of your article, I immediately though it was about security. You know, your critical opinion on how easy or hard it is to secure services on Linux vs. BSD. How about firewalls? NFS? FTP? Samba? SSH? Backing it up with proof. Not just a word of mouth.

    Instead, I found it to be a poorly written piece of propaganda. The article is called "Security meassures", but included no security measures at all, except for the "Hey, BSD is better, why not give it a try?" editorial line.

    I ain't bad to write propaganda, but please, dont mislead people into thinking it was a serious article, or a serious comparison about security.

    I used to use Windoze but swit ...Anonymous -- 19/12/01

    I used to use Windoze but switched to FBSD 1.5 years ago and have not looked back since. I use it for my everyday desktop OS with no complaints. It does everything that I need without a single crash or security breach. Installing software through the ports directory is easy enough for my mother to complete.
    Using the CLI is far more productive and less confusing than the menagerie of windows, dialogs and menus that one has to navigate in Windoze in order to configure something. The man command beats out any Windoze help system.
    It took me about 2 hrs to completely install and configure FBSD for the first time. All I needed was a little bit of documentation and everything fell into place.
    If I need a GUI then I have plenty from which to choose. I thank God for each day that I do not have to put up with M$ Word. LaTeX and LyX are the best things to happen to me.
    I originally had two additional HDs, one for Linux and the other for FBSD. I have yet to find a reason to install Linux and have used the other HD for FBSD as well.

    I'm wondering what the point o ...Anonymous -- 21/12/01

    I'm wondering what the point of it all is. From my experience there is no such thing as a superior OS. Every one has its uses. Some are better with security, some are better for luser friendliness. Some I can set up in ten minutes, make an image and pump it off to an end user's desk to abuse for six months. So, even if I could get a bsd or linux box to act like windows it still would take me a hell of a lot longer to do.

    Linux is good. BSDs are good. Hell, for a closed network Windows can even be good. All I see being spouted are opinions. Even if I prefer BSD for servers, Linux for hacking, and Windows for gaming, it all really doesn't matter squat.

    Linux is the Windows 95 of the ...Hough G. Reamer -- 22/12/01

    Linux is the Windows 95 of the Uni*x world. It is great for newbies to learn on at home. When you want stability and security you need to graduate to a real OS. Linux will be worth looking at when it starts replacing BSD on the longest uptime list at Netcraft. http://uptime.netcraft.com/up/today/top.avg.html

    Welcome to FreeBSD discussion ...Webmaster -- 30/01/02

    Welcome to FreeBSD discussion forums.

    We have setup http://www.freebsdforums.org for all
    FreeBSD users and enthusiasts alike.

    Please register and test drive our forums, and
    help grow and promote our FreeBSD community.

    Thanks, see you soon @ http://www.freebsdforums.org !

    FreeBSD forums
    webmaster@freebsdforums.org

    this articles does a poor job ...wadleigh -- 25/04/02

    this articles does a poor job at best, i have an idea lets take common stereotypes and dress them up like honest fact, then we can parade them around the streets and let people fight over them.

    You can't copy OpenBSD CDs. As ...José Pablo Ezequiel Fernández -- 31/05/02

    You can't copy OpenBSD CDs.
    As far as I know you can buy OpenBSD CDs and install them all the times you want, but you cannot copy them since they're copyrighted by Theo de Raadt (creator of OpenBSD), that's why they don't offer iso images to download.
    On the internet you may find other iso images that are free, created by some other persons.

Add your opinion

Latest Videos

Blogs

  • Darren Greenwood Telecom NZ savings damage prospects
    If Telecom NZ wants to have any of the NZ$1.5 billion the government intends to spend on its new broadband network, it had better think long and hard before offshoring 1500 jobs.
  • Array iiNet: The whys and what nows
    Last week the Federal Court ruled that internet service providers are not responsible for copyright violation by their customers. This is an important decision not just for iiNet, which spent around $4 million defending the case, but for all ISPs in Australia and, indeed, globally.
  • Array Govt, hurry up with releasing data
    A programmer scraped data from the My School website to make some really cool heat maps showing regions of smart schools — no thanks to the government, which didn't supply the data in any useful kind of format.
  • More blogs »

Tags

Back to top

Featured