Table: comparison of linux distributions
[['distribution', 'compile time buffer checks', 'mandatory access control', 'software executable space protection', 'grsecurity', 'rsbac'], ['alpine linux', 'unknown', 'unknown', 'pax', 'yes', 'unknown'], ['debian / ubuntu', 'yes', 'selinux , apparmor', 'pax', 'optional', 'optional'], ['fedora', 'yes', 'selinux', 'exec shield', 'no', 'no'], ['gentoo', 'optional', 'selinux', 'pax', 'optional', 'optional'], ['mandriva', 'unknown', 'apparmor', 'unknown', 'unknown', 'yes']]
Statement: Debian and Ubuntu use 2 Mandatory Access Control package : Selinux and Apparmor
Statement: Debian / Ubuntu and Fedora require Compile Time Buffer Check , on Gentoo they are Optional
Statement: 3 of the top Linux Distribution use Pax , only 1 uses Exec Shield
Statement: Alpine Linux uses Grsecurity , which is also offered as an option on Debian , Ubuntu and Gentoo , but not on Fedora
Statement: the Distribution with Compile Time Buffer Check also use Selinux