Privacy

34334 readers

1034 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

[email protected]

secureblue: Hardened Fedora Atomic and Fedora CoreOS images (secureblue.dev)

submitted 3 days ago by [email protected] to c/[email protected]

18 comments fedilink hide all child comments

cross-posted from: https://lemmy.ml/post/26453685

Not many people have heard about secureblue, and I want to spread the word about it. secureblue provides hardened images for Fedora Atomic and CoreOS. It's an operating system "for those whose first priority is using linux, and second priority is security."

secureblue provides exploit mitigations and fixes for multiple security holes. This includes the addition of GrapheneOS's hardened_malloc, their own hardened Chromium-based browser called Trivalent, USBGuard to protect against USB peripheral attacks, and plenty more.

secureblue has definitely matured a lot since I first started using it. Since then, it has become something that could reasonably be used as a daily driver. secureblue recognizes the need for usability alongside security.

If you already have Fedora Atomic (e.g. Secureblue, Kinoite, Sericea, etc.) or CoreOS installed on your system, you can easily rebase to secureblue. The install instructions are really easy to follow, and I had no issues installing it on any of my devices.

I'd love more people to know about secureblue, because it is fantastic if you want a secure desktop OS!

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 3 points 3 days ago (2 children)

They do not claim to be most secure linux distro on the market but do not say which is. Lol

[–] [email protected] 7 points 3 days ago (1 children)

I believe your confusion comes from the following line: "secureblue does not claim to be the most secure option available on the desktop."

Which is simply their acknowledgement that more secure options like Qubes OS exist. Note, however, that Qubes OS is not based on Linux, but instead on Xen.

[–] [email protected] 2 points 3 days ago (1 children)

So it’s like not using linux commands and such?

[–] [email protected] 3 points 3 days ago

secureblue absolutely does.

Qubes OS does too. But that's becomes dom0 and most of the qubes you'd interact with are just Linux. But the qube can be based on BSD instead. Heck, you could have it based on Windows even. These qubes are VMs; so you can basically do whatever you want with them. The heavy use of virtualization is exactly what makes Qubes OS as secure as it is.

[–] [email protected] 2 points 3 days ago (1 children)

Probably Qubes OS

[–] [email protected] 2 points 3 days ago (2 children)

I am literally halfway installing qubes os. I had linux mint before.

[–] [email protected] 4 points 3 days ago

Going from Linux Mint to Qubes OS could be rough. You're warned ;) .

[–] [email protected] 1 points 3 days ago

Lol good luck but I wouldn't recommend it as your daily os. Qubes is for those who have got a nation state on their back or something like that. For most people, default fedora is more than enough.

(see https://www.privacyguides.org/en/os/qubes-overview/ and https://www.privacyguides.org/en/desktop/)