Stanford University Linux is a hardened version of RedHat Linux. SULinux is designed to keep you safe against hackers/crackers while integrating your Linux system into the Stanford computer environment. Most importantly, SULinux provides a mechanism to bring your system up to date with all the latest system and security packages. SULinux is developed and distributed by the Electrical Engineering and Computer Science Departments.

To get started, check out the Installation/Update instructions.

Please note: ITSS does NOT support SULinux, and software installed for campus-wide use in pubsw (/usr/pubsw) may not work with SULinux 9. See this message for details.

• AFS (optional)
  • Using the OpenAFS client
  • Provides access to hundreds of programs in /usr/pubsw
  • Provides access to your Leland Systems account

• Kerberos (optional)
  • Single sign-on using campus kerberos servers
  • Protects password against network "sniffers"

• Security Enhancements
  • Default safe firewall rulesets
  • libsafe to protect you against buffer overflows (disabled in 9)
  • apt-get enabled distribution maintenance, to keep you up to date.

• Sun Apr 8, 2007 - All versions of SULinux have been removed other than the CentOS 4.x release, as FedoraLegacy no longer exists to support any Redhat/Fedora releases. The SULinux site is now primarily a mirror for base distributions.
• Mon Apr 10, 2006 - CentOS 4.3 is now the official SULinux release. Please consider switching to this long-term supportable edition. FC releases are still planned, but it may best be considered an unstable tree for support by SULinux
• Mon Jul 26, 2004 - FC1 is now the official SULinux release. Also note that Fedora Legacy has stopped supporting RedHat 7.2 and 8.0. Please make sure you are using either 7.3 or 9.0 versions respectively as these still get updates.
• Please note: ITSS does NOT support SULinux, and software installed for campus-wide use in pubsw (/usr/pubsw) may not work with RedHat/SULinux 9, Fedora Core 1, and other modern distros with updated glibc and threading models. See this message for details.