6 ms·

Is this Linux? This article or their website don't use the name Linux or Unix, but they're showing software like Gnome or KDE that are typically used on Linux.

fsflover 5y ago
From TFA: > PureOS leverages the legendary security support from upstream Debian.
- MichaelBurge 5y ago
  So they take security patches from Debian for some packages. I guess the kernel has to be Linux-compatible at least for that to be sensible, so it's probably Linux.
  - fsflover 5y ago
    It's definitely Linux. They upstream everything they can: https://puri.sm/posts/purism-and-linux-5-13/ https://puri.sm/posts/purism-and-linux-5-13/.
- topspin 5y ago
  > the legendary security support from upstream Debian Anytime I do a vulnerability scan of a Debian image (updated via apt) using AWS ECR I get a laundry list of open issues including a few high severity CVEs. Meanwhile images based on Amazon Linux, Alpine or Oracle Linux are clear or have only few lower severity CVEs. I haven't looked at AlmaLinux recently but I'll need to soon; if it is anything like CentOS I expect the scan will be fairly clean. Whatever rationale there might be for this it is difficult to explain to stake holders. In any case 'legendary' seems a stretch comparatively speaking.
  - moffkalast 5y ago
    Debian is legendary for being the most widely used Linux distro, and as such it has the most support. And that is probably the most important thing, but security is not one of its strengths.
  - oynqr 5y ago
    Vulnerability scanners love false positives.
  - goodpoint 5y ago
    You really need a better vulnerability scanner then. Debian is one of the most security-centric distributions.
alisonkisk 5y ago
PureOS makes an effort to avoid saying Linux. IMO it's a deceptive marketing ploy to take software from GNU/Linux without giving credit, and pretending to be something different, perhaps to attract lay people who are scared of "Linux". https://tracker.pureos.net/T749 https://tracker.pureos.net/T749
- fsflover 5y ago
  They avoid Linux, because it's GNU/Linux: https://www.gnu.org/gnu/why-gnu-linux.html https://www.gnu.org/gnu/why-gnu-linux.html. (FSF requires calling the OS GNU/Linux, not Linux, in order to get the endorsment.)
  - mynameisvlad 5y ago
    That’s not what the parent commenter is saying at all. They avoid mentioning GNU/Linux in general.
    - fsflover 5y ago
      No, they don't: https://puri.sm/faq/what-is-gnulinux/ https://puri.sm/faq/what-is-gnulinux/.

fsflover 5y ago

From TFA: > PureOS leverages the legendary security support from upstream Debian.

MichaelBurge 5y ago
So they take security patches from Debian for some packages. I guess the kernel has to be Linux-compatible at least for that to be sensible, so it's probably Linux.
- fsflover 5y ago
  It's definitely Linux. They upstream everything they can: https://puri.sm/posts/purism-and-linux-5-13/ https://puri.sm/posts/purism-and-linux-5-13/.
topspin 5y ago
> the legendary security support from upstream Debian Anytime I do a vulnerability scan of a Debian image (updated via apt) using AWS ECR I get a laundry list of open issues including a few high severity CVEs. Meanwhile images based on Amazon Linux, Alpine or Oracle Linux are clear or have only few lower severity CVEs. I haven't looked at AlmaLinux recently but I'll need to soon; if it is anything like CentOS I expect the scan will be fairly clean. Whatever rationale there might be for this it is difficult to explain to stake holders. In any case 'legendary' seems a stretch comparatively speaking.
- moffkalast 5y ago
  Debian is legendary for being the most widely used Linux distro, and as such it has the most support. And that is probably the most important thing, but security is not one of its strengths.
- oynqr 5y ago
  Vulnerability scanners love false positives.
- goodpoint 5y ago
  You really need a better vulnerability scanner then. Debian is one of the most security-centric distributions.

alisonkisk 5y ago

PureOS makes an effort to avoid saying Linux. IMO it's a deceptive marketing ploy to take software from GNU/Linux without giving credit, and pretending to be something different, perhaps to attract lay people who are scared of "Linux". https://tracker.pureos.net/T749 https://tracker.pureos.net/T749

fsflover 5y ago
They avoid Linux, because it's GNU/Linux: https://www.gnu.org/gnu/why-gnu-linux.html https://www.gnu.org/gnu/why-gnu-linux.html. (FSF requires calling the OS GNU/Linux, not Linux, in order to get the endorsment.)
- mynameisvlad 5y ago
  That’s not what the parent commenter is saying at all. They avoid mentioning GNU/Linux in general.
  - fsflover 5y ago
    No, they don't: https://puri.sm/faq/what-is-gnulinux/ https://puri.sm/faq/what-is-gnulinux/.