Setup Idea Ubuntu Hardening 24.10

[Victor M]

Ubuntu 24.10 Hardening

Settings have changed in 24.10
The new Security app makes Firefox in conformance to my directive to protect the Documents folder.
It is now possible to globally (almost) mandate the use of TLS 1.3

 

[Victor M]

Web site updated today. Fortify Ubuntu: hardening Ubuntu Desktop

 

[Victor M]

Website updated today, https://fortiifiedubuntu.org

 

[Gandalf_The_Grey]

Website updated today, https://fortiifiedubuntu.org

FYI the link is not working, the previous one works.

 

[Vitali Ortzi]

Website updated today, https://fortiifiedubuntu.org

Seems like a lot of distributions have some version with added hardening pretty cool

Here is one for fedora GitHub - secureblue/secureblue: Hardened Fedora Atomic and Fedora CoreOS images


And even bsd has some similar projects like hardenedbsd

 

[simmerskool]

hope this is relevant:
Multiple decade-old security vulnerabilities have been disclosed in the needrestart package installed by default in Ubuntu Server (since version 21.04)

Decades-Old Security Vulnerabilities Found in Ubuntu's Needrestart Package

Critical Ubuntu needrestart flaws allow local root privilege escalation; update immediately to safeguard systems.

thehackernews.com

 

[Victor M]

Thanks for the heads up @simmerskool . I did a update && upgrade as per the Ubuntu notice. It seems Ubuntu's answer was to remove the package because it is no longer installed now.

 

[Spiff]

I did a update && upgrade as per the Ubuntu notice. It seems Ubuntu's answer was to remove the package because it is no longer installed now.

Hi Victor,
Did you check if the needrestart package was installed before you ran update && upgrade?
The needrestart package is not installed by default in Kubuntu 22.04. I don't know for sure about 24.04 and Ubuntu.
The article mentions the needrestart package is installed by default in Ubuntu Server. If you do not run the server version, I seriously doubt the needrestart package is installed by default.

 

[simmerskool]

Hi Victor,
Did you check if the needrestart package was installed before you ran update && upgrade?
The needrestart package is not installed by default i

I think you are correct, ie, IIRC about 2 weeks ago I did a security audit probably with Lynis (IIRC) and its suggestion to install needrestart which is "funny" assuming this vulnerability persists.

 

[Victor M]

This document is no longer maintained and has been taken off the web site.