Уровень 0 · материалов: 3
В кластер включаются документы, посвященные российским дистрибутивам Linux и их сертификации в области безопасности, и исключаются документы о других операционных системах.
Общие признаки: Astra Linux, ALT Linux, сертификация ФСТЭК, информационная безопасность, защита государственных секретов
Группа выше: Импортозамещение программного обеспечения
Смысл: The author describes their experience participating in a bug bounty program for Astra Linux, revealing that several critical security mechanisms of the 'secure' OS were easily bypassed using trivial methods and outdated code.
A security researcher exposes critical vulnerabilities in Astra Linux, revealing a reliance on 19-year-old code and a vendor reluctant to pay full bug bounty rewards.
Смысл: The text describes the architecture, development, and certification process of Astra Linux, specifically the Special Edition. It emphasizes the transition from a standard corporate OS to a highly secure system capable of handling state secrets through the implementation of mandatory access control and rigorous mathematical verification of code.
An insider's look at how Astra Linux Special Edition achieves the highest level of Russian security certification through mandatory access control and rigorous code verification.
Смысл: The main idea is that ALT Linux Desktop Professional has become the first Russian workstation Linux distribution to be certified by FSTEC for handling state confidential information, thereby facilitating its adoption in government agencies.
ALT Linux Desktop Professional is now the first Russian Linux workstation OS certified by FSTEC for use with state confidential information.