a linux distro with tight security?

[qnay]

Hi... I want to use a linux distro that offers very tight security for when it is used online... I am a total newbie for linux and only begining my research of linux after reading and realising the security problems that Windows has!

I will need an excellent desktop environment but looks can not compromise the security -- too many times keyloggers have snagged my passwords, credit card numbers and more!!!

I am considering going to ubuntu... can it be configured and installed with any particular software to make it very secure? What about other distro's?

As a side-note I will be running VMWare on my chosen distro so the distro will need to be capable of running that (i think that puts *BSD out of contention, right?)

[hard candy]

Any linux distribution that is easy for a novice will need some configuration to make it more secure than the default. I would recommend OpenSuse 10.0, you will have a nice desktop to work with, it has either automatic or manual online updates available, and works with a broad range of hardware. You will need to download 5 cd's worth of files to install it, or you can buy the Novell Suse retail version at a electronics or computer store. The Novell version has some commercial stuff like Flash, Quicktime, Real player included. The Opensuse does not have these available on their disks but you can use Hacking Open Suse (http://www.thejemreport.com/mambo/content/view/178/42/) to get and install java, dvd support, etc very easily.
Opensuse and Suse are maintaned very up to date on security issues, and the online updater usually has patches for installed programs once a week.
Suse Security Announcements (http://www.suseforums.net/index.php?showtopic=24245&hl=security)
You will want the Suse Linux OSS released version 10.0 if you download it.
OpenSuse download page (http://en.opensuse.org/Download)
With Ubuntu, it is a very good distro and if you use it, you need to look at the FAQ section in their forums to learn how to add various capabilities to it for playing media such as commercial dvd's, mp3's, flash,etc.
Also, Setting Up VMware on OpenSuse (http://en.opensuse.org/Setting_up_VMware_on_SUSE_Linux)
Xen is an open source VM that is also easily configured with Suse.
Xen (http://www.cl.cam.ac.uk/Research/SRG/netos/xen/)
A good document to look at:
Virtualization resources for Suse (http://en.opensuse.org/Virtualization_Resources_for_SUSE_Linux)

[techwise]

I vouch for Ubuntu. It is an understatement to say Linux is vastly more secure than Windows by default. Additionally, securty enhancement in Linux can get very technical and complicated. I suggest you install Linux and use it and practice the various security tools to get a feel for it all. There are many tools for the job, you'll just have to play with a few and find the ones you like. Good Luck. You are in for a treat compared to your MSFT experiences.

Mike

[Icarus]

It is an understatement to say Linux is vastly more secure than Windows by default.
Let's not disillusion ourselfs too much with this assumption. True that Linux does not have as many root exploitable holes from a browser as Windows does, but Linux is not bulletproof, not even close.

http://www.linuxsecurity.com/ is a good resource to keep up with whats going on and learn how to better protect your system. One of the best protection methods is being active and not expecting your OS to take care of it for you. Keep an eye on processes, users and files. My web server runs on Linux and because of a PHP exploit I became host for a little phishing scam. If it wasn't for a kind sysadmin that got an email I would have not to think of looking for hidden directories, I know better now :D

[techwise]

I can't imagine how I would begin to protect all my machines from gunfire. I guess if they're being shot at I have bigger issues than OS security :-).

Thanks for the link.

M