Why another Linux distro? (cont.) Isn't there already a secure Linux distribution? Most choose software based on security track record A good security track record is no replacement for source code review; unless the software component is very popular, the track record hardly says anything on its design and code quality It isn't just the choice of software which matters There's often an emphasis on kernel modifications It's not the security-related bells and whistles which make a system secure