The EnGarde Linux distribution is probably the most secure Linux distribution I've seen. EnGarde enforces physical, host, and network security to protect your machine from attacks inside and out. In addition to tightening security policies and adding features like a LILO password to prevent someone with physical access getting root, EnGarde also includes intrusion detection to alert you to break-in attempts. Some distributions I've looked at seem to concentrate too heavily on one aspect of security or another, but EnGarde seems pretty well rounded.. . .
The EnGarde Linux distribution is probably the most secure Linux distribution I've seen. EnGarde enforces physical, host, and network security to protect your machine from attacks inside and out. In addition to tightening security policies and adding features like a LILO password to prevent someone with physical access getting root, EnGarde also includes intrusion detection to alert you to break-in attempts. Some distributions I've looked at seem to concentrate too heavily on one aspect of security or another, but EnGarde seems pretty well rounded.

One thing I like about EnGarde is that no unnecessary processes are started at bootup. The average commercial Linux distro enables far too many services at bootup that newer users might not even know to turn off. (Although it's slightly more convenient for a user to have a service turned on by default, there are many cases in which it is undesirable.) EnGarde takes the opposite approach and requires you to explicitly enable services that you'd like to have running through the Webtool. This is a trivial task, as the Webtool is very user-friendly, and setting up the available services is as simple as filling out a form.

I have to say that I was really impressed with the Webtool administration system. Nearly any administrative task can be performed from the Webtool system over a secure connection. There are six main sections in the Webtool: Virtual Host Management, System Management, System Status Monitor, Security, Update, and System Backup.

The link for this article located at UnixReview.com is no longer available.