Free ssp software for linux

Secure-SLinux provides a secure, stable, and slim OS for professional enterprise servers. Secure-SLinux is based on the Linux kernel and GNU glibc, and builds on HLFS/BLFS.
It is quick to install (5-10 minutes), hardened (GRsecurity, PAX, RBAC, SSP, frandom, etc.), and easy to administrate. There are precompiled binary releases for console only and XOrg-based systems.
Main features:
- open source
- secure - hardened OS
- robust
- easy to administrate - comes out of the box with everything you need for your everyday administrative tasks
- easy to update - simply move a single link and keep your old versions
- suitable for all professional enterprise servers
- cost effective
... and it is installed in just 5 minutes!
Enhancements:
- SSLX-Desktop is the desktop environment for Secure-SLinux. It is based on programs such as XFCE, Firefox, Thunderbird, Filezilla, GIMP, OpenOffice.org, Eclipse, Bluefish, and Xfe.

Adamantix project aims to become a highly secure but usable Linux distribution. A standard Linux distribution is not very secure, despite the fact that it may be more secure than other operating systems.
The underlying problem is that most of Linux as we know it today was designed for speed and features, but not for security. Adding security to a system which is not designed to be secure will not solve most of the current and future problems.
This means that the whole system needs to be redesigned from the ground up to make it really secure. And that is what the Adamantix project is going to accomplish.
Adamantix v1.0 (known as Trusted Debian v1.0 back then) was the first Linux distribution to integrate support for PaX and SSP (Stack Smashing Protector, aka. Propolice). PaX is a kernel patch which protects against a number of buffer overflows and other memory corruption attacks. SSP is a GCC patch which provides protection of the stack, which makes stack overflows harder to exploit.
Currently work is going on to integrate RSBAC support in Adamantix. RSBAC is a kernel patch which provides a flexible and extensible security framework. This framework is very powerful and can be used to implement almost any security feature. A number of modules which use this framework have been implemented on top of it, such as:
- An improved chroot (jail) module
- On-access virus scanning module
- Linux capabilities management module
- Linux resource management module
- User ID changing management module
- Role based access module
- Access Control Lists (ACLs) module
- And others.
All these modules can be combined to form a whole which is greater than the sum of the individual modules. In the future the number of modules is likely to grow, including modules for gr-security RBAC and SELinux, to provide backwards compatibility for legacy systems. RSBAC is a toolkit, in the same spirit as Linux is a toolkit.
It takes quite some time to learn and understand RSBAC, just like learning Linux takes quite some time. But this time is well invested and will give similar rewards as learning Linux.

Data distribution is achieved by transparent replication of a shared scene graph among the participating processes of a distributed application.

A sophisticated group communication system is used to guarantee state consistency even in the presence of late joining and leaving processes. The familiar dataflow graph found in modern stand-alone 3D-application toolkits extends nicely to the distributed case.

Many toolkits for the development of stand-alone VE applications exist today. They provide the programmer with a high-level interface to represent complex geometry in a scene graph and to render that scene graph. The programmer is shielded from the details of dealing with low-level graphics and system APIs, and can concentrate on the development of the application itself.

AVANGO provides programmers with the concept of a shared scene-graph, accessible from all processes forming a distributed application. Each process owns a local copy of the scene graph and the contained state information, which is kept synchronized.

Our object-oriented framework allows the creation of application specific classes, which inherit these distribution properties. Furthermore, the shared scene-graph is augmented with a distributed dataflow graph. This provides the same evaluation characteristics in distributed applications as in stand-alone applications, and effectively supports the development of distributed interactive applications.

In contrast to similar systems like Repo-3D (MacIntyre:1998) we focus on high-end, real-time, virtual environments like CAVEs (Cruz-Neira:1993:SSP) and Workbenches (HKP:Krueger94,HKP:Krueger95), therefore the development is based on SGI Performer (Rohlf:1994:IPH).

With AVANGO, we provide a framework that combines the familiar programming model of existing stand-alone toolkits with built-in support for data distribution that is almost transparent to the application developer.