- Oct 3, 2022
- 650
Ubuntu hardening. Not a script. Just follow along and paste in the commands.
Last edited:
Ubuntu Hardening
- Thread starter Victor M
- Start date
- Oct 3, 2022
- 650
Website updated today Fortified Ubuntu: hardening Ubuntu 24 Desktop
- Oct 3, 2022
- 650
Website updated today. Added more protection to firefox-common.profile. Added dpkg-divert commands so that our configurations do not get overwritten by updates. Removed 'firefox' from 'apparmor firefox' in firefox-common.profile. Fortified Ubuntu: hardening Ubuntu 24 Desktop
SeaKelp
Level 1
- Jun 6, 2024
- 10
Ubuntu Oval | Security | Ubuntu
Parameters and methods for consuming Ubuntu OVAL data. OVAL is used by the Ubuntu Security Team for CVE tracking and management.
ubuntu.com
- Oct 3, 2022
- 650
I prefer to search for Live data myself: Common Vulnerabilities and Exposures (CVEs) . Oval relies on old static data available on the ubuntu server: security-metadata.canonical.com . I suspect it only reports Patched vulnerablities, because all of the items in that list says 'patch'. There has to be some undergoing evaluation, and some that have undergone evaluation and are rated unimportant and so on. Imho, it is more useful to see what a potential attacker sees when he is doing reconnaissance.
On the other hand ubuntu's site revealed things I have missed when doing my searches. Ubuntu knows the complete list of components that are in use in it's releases. I need to be more careful and expand my searching. That oval report is good for people who need to do extensive testing before patching and are forever behind in patching. I don't have any custom applications that requires me to do testing. Ubuntu's own testing is good enough for me.
On the other hand ubuntu's site revealed things I have missed when doing my searches. Ubuntu knows the complete list of components that are in use in it's releases. I need to be more careful and expand my searching. That oval report is good for people who need to do extensive testing before patching and are forever behind in patching. I don't have any custom applications that requires me to do testing. Ubuntu's own testing is good enough for me.
Last edited:
- Oct 3, 2022
- 650
Website updated today. Risk based defences. Fortified Ubuntu: hardening Ubuntu 24 Desktop
- Jun 18, 2022
- 422
How can I download UBUNTU Pro which is free for personal usage ?Switch to Ubuntu Pro, free for 5 home devices.
Ubuntu Pro | Ubuntu
Canonical provides Ubuntu Pro with 10 years of enhanced CVE patching, FIPS compliance, CIS and DISA-STIG profiles and enterprise-grade open source software security with a single subscription for open source supply chain provenance.
Spiff
Level 1
- Jul 20, 2023
- 36
On the Ubuntu Pro page, https://ubuntu.com/pro, if you scroll down, under Looking to learn more, you will find a link to the Tutorial page, https://ubuntu.com/pro/tutorial. I think that page gives you all the information that you need.
- Jun 18, 2022
- 422
