RSS
Логотип
Баннер в шапке 1
Баннер в шапке 2

Alt Linux 7.0

Product
Developers: BaseALT
Last Release Date: 2018/01/12
Technology: OS

Content

The BaseALT company which received in 2016 investments from IVK in April, 2017 submitted the new version of the Alt Linux SPT 7.0 distribution kit for servers, workstations and thin clients with the built-in software tools of data protection. A basis of the solution is the operating system with the open code in which development the development team was engaged since the end of the 90th - the beginning of the 00th years.

The new product distinguishes existence of the FSTEC certificate of Russia. In particular, it conforms to requirements of regulating documents "Computer aids. Protection against unauthorized access to information. Security indicators from unauthorized access to information" — on the 4th class of security, "Protection against unauthorized access to information. Part 1. Information security software. Classification by the level of lack of not declared opportunities" — on the 3rd level of control and specifications at accomplishment of the operating instructions provided in form KShDS.10514-01 30.01.

Thus, the distribution kit can be used for creation of automated systems on class 1B inclusive and personal data information systems (ISPDN) on class 1K inclusive.

Application of the built-in certified information security tools with discretionary and mandatory access control allows: at the same time to store and process public, service, personal and other confidential data of different categories on one personal computer or the server; ensure multi-user functioning with access isolation to information; connect different devices for scanning and printing of documents, including with signature stamps and stamps of limited use.

Besides, there is an opportunity: set and use antivirus and cryptographic tools and also means of the electronic digital signature and firewalling, compatible to the operating system and the built-in information security tools; control integrity of information security tools, software environment and data archives the built-in means; set the additional software if it does not break functioning of the operating system and information security tools; work with virtual machines; use means of the centralized authorization.


By Alt Linux SPT it is included in the Unified register of the Russian programs for electronic computers and databases.

Advantages of Alt Linux SPT 7.0:

  • check according to requirements to mechanisms of protection of a system of virtualization according to Specifications;
  • implementers of a server and client part of a directory service compatible to the Active Directory;
  • shutdown of SecureBoot when loading OS is not required;
  • possibility of deployment in the closed network segment of a local repository for installation and updating of programs;
  • The information security facility, the providing mechanisms of the centralized authorization under the LDAP protocols and LDAP+Kerberos;
  • management tools the operating system via the web interface (Alterator);
  • stable release of a kernel of Linux 3.14;
  • transfer to users of corrections of the revealed errors on security before passing of inspection control by the Developer is provided.

Use of Alt Linux SPT 7.0 allows to store and process at the same time on one personal computer or the server confidential data, to ensure multi-user functioning with access isolation to information, to work with virtual machines and also to use means of the centralized authorization.

The Alt Linux SPT 7.0 distribution kit is available to servers, workstations and thin clients.

To "Alt Linux SPT 7.0 Workstation" it is intended for daily work on personal computers. It ensures the comfortable protected functioning with information of limited access with a possibility of viewing and copying of data of a smaller confidentiality level or from open sources.

"Workstation" includes the graphical environment MATE, the Caja file manager, an expanded complex of applications for work on the Internet (including the client of e-mail and the Firefox browser) and the LibreOffice office suite which is not requiring acquisition of licenses. In addition, the Russified programs of scanning and recognition of documents, browsers and editing graphic and multimedia files, the Apache Web server, clients of monitoring systems of Zabbix and backup of Bacula and also a set of other applications are a part of a product.


"Alt Linux SPT 7.0 the Thin client" is the diskless workstation supporting network loading and different network protocols. For the rest Thin client repeats functionality of Workstation.

"Alt Linux SPT 7.0 the Cloud platform" - the unique solution allowing to create the protected private or hybrid cloud of the enterprise, a public cloud of the operator which can be certified afterwards according to requirements of regulating authorities.

The cloud platform includes modules of management of a cloud of OpenStackMitaka, Tionix, Ceph, KVM.

  • Tionix.NodeControl allows to manage resources of DPC;
  • Tionix.CloudControl allows to operate virtual machines, baremetal, the containers Linux;
  • Tionix.VDI allows to create the system of providing access to virtual desktops and to execute delivery of applications.

A system has the single console for hierarchical distribution of powers in a cloud and the scheduler for automation of activity of the system administrator.

The main advantage "Alt Linux SPT 6.0 the Cloud platform" – a possibility of creation of extremely reliable and disaster-proof solutions for the DPC organization of the client.

The cloud platform of Tionix included in a distribution kit is developed by Tioniks company which is his owner and performs his support.

"Alt Linux SPT 7.0 Server" combines all opportunities of the classical server and modern technologies of management of them. It includes the caching Squid proxy server, the multifunction server of e-mail postfix, the full-function vsftpd FTP server, a monitoring system of Zabbix and a backup system of the enterprise level of Bacula.

Besides, the solution includes a software package of integrity checking of the Osec system, the environment for creation and management of infrastructure cloud services of OpenStack, PostgreSQL DBMS, the system of printing of CUPS, a system virtualization of KVM, the protected hypervisor of virtual machines and many other things.

Principal components:

  • Linux 3.14 kernel;
  • system of initialization: The server is SysVinit, the Workstation – systemd;
  • MySQL database server 5.5.30, PostgreSQL 9.5 and 9.4-1C;
  • squid 3.5.22 proxy server;
  • Apache 2.2.31 Web server
  • backup system of Bacula 5.2.13;
  • Postfix 2.9.5, Dovecot-2.2.21 mail servers;
  • server of an antispam of Spamassassin 3.3.2;
  • programming languages: PHP 5.5.21, gcc-4.7, Perl 5.16, Python 2.7.6, Python 3.3.1, Ruby 1.9.3,
  • server of virtualization qemu-kvm 2.5.1;
  • graphical working environment of MATE 1.6;
  • Libreoffice 4.2 office suite;
  • Firefox browser 45.5;
  • Thunderbird 45.4 e-mail client;
  • VirtualBox 5.1.10 virtual machine;
  • environment of emulation Windows Wine-1.9.3

During creation of a distribution kit the particular emphasis is placed on compatibility with other products.

File:Aquote1.png
Our distribution kit - the platform, including for complete solutions with other developers, we consider it very important therefore we are open for cooperation and actively we test our solutions for compatibility, if necessary we finish them, - say in the company.
File:Aquote2.png

So, the BaseALT together with other developers regularly holds testings for compatibility. Ensuring correct joint work with program and hardware of data protection allows to expand a range of application of a distribution kit.

As of May, 2017, Krypto-PRO, CryptoCom, the Asset, Relex (Linter), OKB SAPR, the Code of Security, KB Panorama, Smart-Soft, Postgres Professional, Kaspersky Lab and New cloud technologies successfully passed test for solution compatibility of Aladdin R.D. companies.

The BaseALT assumes that by Alt Linux SPT 7.0 it will be demanded among medical and educational institutions. Also negotiations with the enterprises of defense industry complex are conducted, many of which waited for certification of this distribution kit.

In addition, creators of the solution expect federal, regional and municipal authorities which, in addition to traditional interests on data protection, have instructions on transition to domestic software within the order of the government No. 1588-r. The developer calculates that the product conforms to additional requirements to software from the Register, certain Government decree No. 325.

As for development of a product, in plans of the developer - to provide support of different hardware architecture, including the domestic Elbrus platform and also to complete certification of a distribution kit based on the eighth BaseALT platform in the Ministry of Defence.

152

2019

Compatibility with Raidix DWH

On May 7, 2019 the Raidix company announced a successful completion of software testing of RAIDIX 4.X and operating systems of the Viola family. Read more here.

Compatibility with VideoMost

On April 23, 2019 the companies "BaseALT" also SPIRIT announced a successful completion of testing program servers both clients for video conferencings and unified communications VideoMost productions SPIRIT and operating systems (OS) families "Viola" developments of BaseALT company. In more detail here.

2018

Compatibility with ABBYY FineReader Engine

On December 25, 2018 it became known that the companies "BaseALT" and ABBYY successfully held testing of tools for ABBYY FineReader Engine developers 11 and 12 of versions for Linux with Viola Workstation Viola Server Alt Linux 7.0, 8, 8 that allows to recommend sensing technologies of ABBYY for embedding in the applications working under management OS of ALT.

Compatibility with "Rvirtualization 7" and "Rkhranilishche 7"

On October 31, 2018 the BaseALT company reported that together with Rosplatforma carried out an inspection for correct work of operating systems on the Viola platform as guest in the environment of server virtualization of Rosplatforma company. Read more here.

Compatibility with the Linter Bastion DBMS

On July 5, 2018 it became known that according to the results of tests the compatibility and correct work DBMS Linter Bastion from operating systems the Viola family, including Alt Linux SPT 7 is confirmed. In more detail here.

Compatibility with EDMS THESIS

In February, 2018 the company Haulmont received the certificate of system compatibility of management of documents and tasks THESIS from operating systems "Viola" production of the company BaseALT. It confirms that EDMS TEZIS correctly works in the systems "Alt Linux SPT 7", "Viola Server 8.2" and "the Viola of 8 joint ventures". In more detail here.

2017

Closing of vulnerability of Meltdown

The BaseALT company — the Russian developer of operating systems for a public sector, state corporations and large business — announced on January 12, 2018 release of the updates blocking a possibility of use of vulnerability of CVE-2017-5754 (which received the name Meltdown) in all distribution kits and the current repository of development. Updates are available since January 11.

Protection extends to all software products created based on technology platforms of p8 (operating systems for large enterprises: A viola the Server, the Viola the Workstation and the Viola Workstation K, the OS Alt Education and Simpli's Alto, starter kits) and also c8 and c7 (the certified Viola of 8 Joint Ventures and Alt Linux SPT 7.0 distribution kits). Besides, changes are made to the current branch of a repository Sisyphus. Updating is established by regular administrative tools.

Besides, the company soon will also provide methods of elimination of a possibility of use of vulnerabilities of CVE-2017-5753 and CVE-2017-5715 (which received the general name Spectre) over which conducts work. Unlike vulnerability of Meltdown, for blocking of use of vulnerabilities of Spectre not only updating of a core, but also reassembly of all consumer software can be required, specified in BaseALT.

As explained in the company, vulnerabilities of Spectre and Meltdown are consequences of defects of sale of the mechanism of speculative execution of commands in modern processors. These defects lead to emergence of methods of a bypass of access checks for reading memory. Vulnerabilities of CVE-2017-5753 and CVE-2017-5715 are present at the majority of modern processors; vulnerability of CVE-2017-5754 is detected in the Intel processors released after 1995.

File:Aquote1.png
As vulnerabilities of Meltdown and Spectre are equipment rooms, software updatings are only alternate paths of their closing which are inevitably leading to notable decline in production. Users for whom such decrease is unacceptable should address suppliers of processors for their correction or replacement — specified in BaseALT.
File:Aquote2.png

Compatibility with Red Data Base DBMS

The companies "Red Soft" and "BaseALT" in November, 2017 announced successful testing of two products from lines of developers: DBMS "Red Data Base" (Red Soft companies) and operating systems the Viola families, including the certified FSTEC Russia Alt Linux SPT 7.0 (from BaseALT). In more detail here.

Compatibility with Prognoz Platform

On September 11, 2017 the companies Foresight also BaseALT announced conducting testing of compatibility of the solutions. Results of testing confirmed stable work Prognoz Platform with solution "Alt Linux SPT" 7.0. In more detail here.