Comparison of operating systems

From Vero - Wikipedia
Jump to navigation Jump to search

Template:Short description Template:Use mdy dates These tables provide a comparison of operating systems, of computer devices, as listing general and technical information for a number of widely used and currently available PC or handheld (including smartphone and tablet computer) operating systems. The article "Usage share of operating systems" provides a broader, and more general, comparison of operating systems that includes servers, mainframes and supercomputers.

Because of the large number and variety of available Linux distributions, they are all grouped under a single entry; see comparison of Linux distributions for a detailed comparison. There is also a variety of BSD and DOS operating systems, covered in comparison of BSD operating systems and comparison of DOS operating systems.

Nomenclature

The nomenclature for operating systems varies among providers and sometimes within providers. For purposes of this article the terms used are;

kernel
In some operating systems, the OS is split into a low level region called the kernel and higher level code that relies on the kernel. Typically the kernel implements processes but its code does not run as part of a process.Template:Disputed inline
hybrid kernel
monolithic kernel
Nucleus
In some operating systems there is OS code permanently present in a contiguous region of memory addressable by unprivileged code; in IBM systems this is typically referred to as the nucleus. The nucleus typically contains both code that requires special privileges and code that can run in an unprivileged state. Typically some code in the nucleus runs in the context of a dispatching unit, e.g., address space, process, task, thread, while other code runs independent of any dispatching unit. In contemporary operating systems unprivileged applications cannot alter the nucleus.

License and pricing policies also vary among different systems. The tables below use the following terms:

BSD
BSD licenses are a family of permissive free software licenses, imposing minimal restrictions on the use and distribution of covered software.
bundled
The fee is included in the price of the hardware
bundled initially
The fee is included in the price of the hardware but upgrades require an additional fee.
GPL2
GPL3
Per user
The fee depends on the maximum number of users concurrently logged on.
MSU
The fee depends on the resources consumed by the user
MULC
Measured Usage License Charges
PSLC
Parallel Sysplex Software Pricing

General information

Template:ClearTemplate:Sticky header

Template:Reflist

Technical information

Template:Sort-under

Template:Reflist

Security

Name Resource
access
control
Subsystem
isolation
mechanisms
Integrated
firewall
Encrypted
file
systems
No execute (NX)
page flag
Manufacturer acknowledged unpatched vulnerabilities (by severity)<ref name="unpatched" group="s"/>
Secunia Security-
Focus
scope="col" Template:Verth scope="col" Template:Verth Extremely critical
(number / oldest)
Highly
critical
(number / oldest)
Moderately critical
(number / oldest)
Less
critical
(number / oldest)
Not
critical
(number / oldest)
Total
(number / oldest)
AIX 7.1 POSIX, ACLs, MAC, Trusted AIX - MLS, RBAC chroot IPFilter, IPsec VPNs, basic IDS Template:Yes Template:Yes<ref name="AIXHardwareNX" group="s"/> Template:N/a colspan="5" Template:Unk Template:Good0
FreeBSD 10.1 POSIX, ACLs, MAC chroot, Jails, MAC partitions, multilevel security, Biba Model, BSD file flags set using chflags, Capsicum Capability-based security IPFW2, IPFilter, PF, IPsec Template:Yes Template:Yes Template:Yes<ref name="FreeBSDstackProtection" group="s"/> Template:Good0 Template:Good0 Template:Good0 Template:Good0 Template:Good0 Template:Bad>0
GhostBSD 3.1 POSIX, ACLs, MAC chroot, jail, MAC partitions, BSD file flags set using chflags IPFW2, IPFilter, PF Template:Yes Template:Yes Template:Yes Template:Good0 Template:Good0 Template:Good0 Template:Good0 Template:Good0 Template:Bad>0
Genode Hierarchal,<ref>Template:Cite web</ref> least privilege capability-based security Virtual switch and NAPT controls in user-space Template:No Template:Yes Template:No colspan="6" Template:Unk
HP-UX 11.31 POSIX, ACLs chroot IPFilter Template:Yes Template:Dunno Template:Dunno Template:Good0 Template:Good0 Template:Bad3
Template:Start date and age
Template:Bad2
Template:Start date and age
Template:Good0 Template:Bad>0
Inferno POSIX Namespaces,<ref name="namespace">Template:Cite web</ref> capability-based security, no superuser or setuid bit Template:Dunno Template:Dunno Template:No Template:No colspan="5" Template:Unk Template:Bad>0
Linux-based 2.6.39 POSIX, ACLs,<ref name="LinuxACL" group="s"/> MAC chroot,<ref name="LinuxJail" group="s"/> seccomp, Namespaces, SELinux, AppArmor Netfilter, varied by distribution Template:Yes Template:Yes Template:Yes Template:Good0 Template:Good0 Template:Good0 Template:Bad6
Template:Start date and age
Template:Bad11
Template:Start date and age
Template:Bad>0
Mac OS 9.2.2 Template:No Template:No Template:No Template:No Template:No Template:No Template:Good0 Template:Good0 Template:Good0 Template:Good0 Template:Good0 Template:Bad>0
OS X 10.10.5 POSIX, ACLs<ref name="MacACL" group="s"/> chroot, BSD file flags set using chflags ipfw Template:Yes Template:Yes (as of 10.5, X64 only) Template:Yes (Intel only) Template:Good0 Template:Good0 Template:Bad1
Template:Start date and age
Template:Bad2
Template:Start date and age
Template:Bad5
Template:Start date and age
Template:Bad>0
NetBSD 6.1.2 POSIX, Veriexec, PaX, kauth chroot, kauth, BSD file flags set using chflags IPFilter, NPF, PF Template:Yes Template:Yes Template:No colspan="5" Template:Unk Template:Bad>0
NetWare 6.5 SP8 Directory-enabled ACLs Protected address spaces IPFLT.NLM Template:Yes Template:Yes Template:No Template:Good0 Template:Good0 Template:Bad1
Template:Start date and age
Template:Bad2
Template:Start date and age
Template:Good0 Template:Good0
OES-Linux Directory-enabled ACLs chroot IPFilter Template:Yes Template:Yes Template:No colspan="5" Template:Unk Template:Bad>0
OpenBSD 4.8 POSIX chroot, systrace, BSD file flags set using chflags PF Template:Yes Template:Yes Template:Yes colspan="5" Template:Unk Template:Bad>0
OpenVMS 9.2 ACLs, privileges logical name tables Template:Dunno Template:Dunno Template:Yes Template:Dunno Template:Good0 Template:Good0 Template:Good0 Template:Good0 Template:Good0 Template:UnkUnknown
OS/2, eComStation, ArcaOS ACLs<ref name="OS2ACL" group="s"/> Template:No IPFilter Template:No Template:Dunno Template:Dunno Template:Good0 Template:Good0 Template:Good0 Template:Good0 Template:Good0 Template:Good0
TrueOS 8.1 POSIX, ACLs, MAC chroot, jail, MAC partitions IPFW2, IPFilter, PF Template:Yes<ref name="PCBSDencrypted" group="s"/> Template:Dunno Template:Dunno Template:Good0 Template:Good0 Template:Good0 Template:Good0 Template:Good0 Template:Bad>0
Plan 9 POSIX ? Namespaces,<ref name="namespace" /> capability-based security, no superuser or setuid bit ipmux Template:Yes Template:No Template:No colspan="5" Template:Unk Template:Bad>0
QNX 6.5.0 POSIX Template:Dunno PF, from NetBSD Template:Dunno Template:Dunno Template:Dunno Template:Good0 Template:Good0 Template:Good0 Template:Bad5
Template:Start date and age
Template:Bad1
Template:Start date and age
Template:UnkUnknown
RISC OS Template:No Template:No IPFilter Template:No Template:No Template:No colspan="6" Template:Unk
Solaris 10 POSIX, RBAC, ACLs, least privilege, Trusted Extensions chroot, Containers,<ref name="SolarisJail" group="s"/> Logical Domains IPFilter Template:Yes<ref name="SolarisEncrypted" group="s"/> Template:Yes Template:No Template:Good0 Template:Bad2
Template:Start date and age
Template:Bad5
Template:Start date and age
Template:Bad3
Template:Start date and age
Template:Bad2
Template:Start date and age
Template:Bad>0
OpenSolaris 2009.06 POSIX, RBAC, ACLs, least privilege, Trusted Extensions chroot, Containers,<ref name="SolarisJail" group="s"/> Logical Domains IPFilter Template:Yes<ref name="SolarisEncrypted" group="s"/> Template:Yes Template:No Template:Good0 Template:Good0 Template:Good0 Template:Good0 Template:Good0 Template:Bad>0
Windows Server 2012 ACLs, privileges, RBAC Win32 WindowStation, desktop, job objects Windows Firewall Template:Yes Template:Yes Template:Yes Template:Good0 Template:Good0 Template:Good0 Template:Good0 Template:Good0 Template:Unk[Unknown]
Windows 8.1 ACLs, privileges, RBAC Win32 WindowStation, desktop, job objects Windows Firewall Template:Yes Template:Yes Template:Yes Template:Good0 Template:Good0 Template:Good0 Template:Good0 Template:Bad1
Template:Start date and age
Template:Unk[Unknown]
ZETA POSIX<ref name="ZetaSuperuser" group="s"/> Template:No Template:No Template:No Template:No Template:No colspan="6" Template:Unk
STOP 6, XTS-400<ref name="STOP6Certified" group="s"/> POSIX, multilevel security, Biba Model mandatory integrity, ACLs, privileges, subtype mechanism Multilevel security, Biba Model, subtype mechanism Template:No Template:No Template:No Template:No colspan="6" Template:Unk
z/OS 1.11 RACF RACF, low storage protection, page protection, storage protect key, execution key, subspace group facility, APF, ACR (alternate CPU recovery), more z/OS IPSecurity Template:Optional Template:Yes (storage protect key, execution key, APF, more) Template:Yes Template:Good0 Template:Good0 Template:Good0 Template:Good0 Template:Good0 Template:UnkUnknown
Name Resource
access
control
Subsystem
isolation
mechanisms
Integrated
firewall
Encrypted
file
systems
scope="col" Template:Verth scope="col" Template:Verth Extremely critical
(number / oldest)
Highly
critical
(number / oldest)
Moderately critical
(number / oldest)
Less
critical
(number / oldest)
Not
critical
(number / oldest)
Total
(number / oldest)
No execute (NX)
page flag
Secunia Security-
Focus
Known unpatched vulnerabilities (severity is accounted for)<ref name="unpatched" group="s"/>

Template:Reflist

Commands

For POSIX compliant (or partly compliant) systems like FreeBSD, Linux, macOS or Solaris, the basic commands are the same because they are standardized.

NOTE: Linux systems may vary by distribution which specific program, or even 'command' is called, via the POSIX Template:Mono function. For example, if you wanted to use the DOS Template:Mono to give you a directory listing with one detailed file listing per line you could use <syntaxhighlight lang="bash" class="" style="" inline="1">alias dir='ls -lahF'</syntaxhighlight> (e.g. in a session configuration file).

Template:Reflist

See also

Template:Div col

Template:Div col end

Operating system comparisons

Template:Div col

Template:Div col end

References

Template:Reflist

Template:Sister project

Template:Operating system