Lilblue Linux For Linux

Lilblue Linux is an open source Linux operating system based on the Gentoo distribution. It is designed to be used on embedded system and provides a security-enhanced, full-featured Xfce desktop environment, built on uClibc. Actually, Lilblue Linux is Gentoo. It is not a separate distribution, as its target audience is experienced Gentoo users with a passion for installing Linux on embedded system.

It is patched with Gentoo's hardened toolchain and uses the Grsec/PaX-patched kernel. As mentioned above, it is built on top of the uClibc C library, which is optimized for embedded systems, and designed to support only the 64-bit computer architecture.

The distribution uses a feature-rich Xfce desktop environment. It includes various open source applications, such as Epiphany for web browsing, AbiWord for word processing, Claws-Mail email client, SMPlayer for watching movies, and GQview for viewing image files. In addition, HexChat provides a very good IRC (Internet Relay Client) application, the Gcalctool and GText utilities are there for common office tasks, and Transmission allows you to download BitTorrent files.

The main attraction of this project it the “security-enhancement" feature, which comes from a toolchain that creates all of userland. It includes stack-check and stack smashing protection, position independent executables, hardened linking, and a non-executable stack. The Grsec/PaX-patched kernel included in Lilblue Linux provides several memory protection features for processes, including MPROTECT, RANDMMAP, PAGEEXEC, and EMUTRAMP. It comes with enhanced address space layout randomization, and various kernel-userland and internal surface hardening functionality.

Lilblue Linux is distributed as an archive of 1GB in size, and in order to be deployed on an embedded system, you will need to the official Gentoo install ISO image. The installation will involve some advanced Linux knowledge, for creating the root, boot and swap partitions, formatting and mounting the partitions, preparing the chroot, and configuring the system.