Advanced Security TuxTalk - Ubuntu 26.04 LTS - Tuxified !

Last updated
May 21, 2026
How it's used?
For home and private use
Operating system
Linux
Other operating system
None
On-device encryption
Other full-disk drive encryption software
Log-in security
    • Biometrics (Windows Hello PIN, TouchID, Face, Iris, Fingerprint)
Security updates
Allow security updates and latest features
Update channels
Allow stable updates only
User Access Control
N/A - Linux / Mac / Other operating system
Smart App Control
N/A - Linux / Mac / Other operating system
Network firewall
Enabled
About WiFi router
Fritzbox 7690
Real-time security
ClamUI
Firewall security
Built-in Firewall for Mac/Linux
About custom security
AppArmor
FireJail
GUFW - Firewall Gui
Periodic malware scanners
ClamAV
Malware sample testing
I do not participate in malware testing
Environment for malware testing
None
Browser(s) and extensions
Firefox
uBlock Origin
Malwarebytes Browser Protection
Enpass
DarkReader
OSPrey Browser Extension
Secure DNS
Quad9 in Router
Desktop VPN
MullvadVPN
Password manager
Enpass
Maintenance tools
Timeshift
RescueZilla
File and Photo backup
Online
Subscriptions
    • Apple iCloud+ 2TB
    • Google One Premium 2TB
    • Microsoft 365 Family 6TB
System recovery
Timeshift
Risk factors
    • Browsing to popular websites
    • Making audio/video calls
    • Opening email attachments
    • Buying from online stores, entering banks card details
    • Logging into my bank account
Computer specs
Lenovo T480 Laptop
Notable changes
Switched from Fedora back to Ubuntu.
What I'm looking for?

Looking for minimum feedback.

Yes you are safe with your userland apps. And Ubuntu took care of firefox which use snap and apparmor. And there is flatpak of course.
And you have systemd 'jail configurations' to protect some systemd daemons - for example look inside systemd-resolved.conf.(which handles DNS queries) You can enhance some daemon conf's by addinig more restrictions - like 'ProtectHome' ( if i remember correctly), (the options are documented in systemd something)

But Ubuntu is lying with those empty apparmor placeholder profilles, it makes the apparmor 'status' command shows a long list of stuff. And I don't like them lying. You lose a bit of faith with them.
Dunno if they are lying, from reading tests online app armor works. I have a full rescuezilla fedora and Ubuntu backup ,
 
app armor works
Oh apparmor does work. I have used their firefox apparmor profile before firefox became a snap. And I have modified it to forbid firefox from touching Documents, and exercised it using firefox's file menu, so I am sure it works.
 
  • +Reputation
Reactions: TuxTalk
Switched to Brave.
This option is great in Brave.

1780150422109.png
 
  • Like
Reactions: Captain Awesome