2 ms·

Are there any security improvements worth mentioning in this release? Ubuntu used to be at the forefront of security on Linux and kept track of improvements mad

by dguido 14y ago

Are there any security improvements worth mentioning in this release? Ubuntu used to be at the forefront of security on Linux and kept track of improvements made per release on their wiki. This effort seems to have stalled after the departure of key personnel and nothing has changed in a year or more. https://wiki.ubuntu.com/Security/Features https://wiki.ubuntu.com/Security/Features

jdstrand 14y ago
The Security/Features page remains up to date (mostly, see below) and while new security features did not land in 13.04, a lot of work was done on client application isolation and better supporting using AppArmor with LXC. Many of these features will land in 13.10 and 14.04 LTS. The list of applications compiled with PIE is not currently up to date, but is being worked on (part of the problem is a lot of developers started compiling their packages with PIE and we now have to find them. A nice problem to have :). Also note that incremental security features are not usually mentioned. For example, seccomp2 is used in a number of places now and AppArmor improvements such as mediation of mount or the upcoming DBus work are/will not be specifically mentioned.