To view parent comment, click here.
To read all comments associated with this story, please click here.
1. I'm not a Ubuntu user so don;t go making sweeping generalizations.
2. Turning off ping response has little to do with security. It's mostly nonsense with a bit of security by obscurity mixed in.
3. You seriously added "lack of firestarter" as a bug. Not having a graphical front end for a firewall that is unnecessary in the default install (nothing is listening to begin with) is not a bug.
Thats not a answer now is it, so Fedora and SUSE are paranoid with their default security settings?
Lets just take SELinux out of the kernel because most distros dont take it seriously. Does anyone really care until they get more market share when it comes to security?
What ports are open on a default Ubuntu desktop? What services are running that are available on anything other than localhost. Honestly I do not know the answer. I have multiple Ubuntu installs but they are hardly stock. On most of my non server boxes the only two things listening on * are ssh (added after the fact) and bootpc. (x)inetd in not installed by default either.
Further... Firestarter? I understand the need to be newbie friendly but Firestarter is not something I want installed period, much less as part of default. Firestarter can not gracefully handle even moderately complex firewall scenarios. Prompt them on post install or something but please not default, Network Manager is bad enough. I use Shorewall but I would not recommend that as a default either for the opposite reasons.
What ports are open on a default Ubuntu desktop?
Not enough.
On Feisty AFAIK the only open port should be Avahi's mDNS transponder.
But many useful ports are closed: cups doesn't listen for printers on the LAN, for example.
Security isn't worth it when you lose functionality.
And you're assuming with that by the tone of of your post that suddenly the little elves over in Ubuntu land are going to rush around franticly to meet your demands? Mate, get a clue.
So you want SELinux, then use Fedora; enjoy the fact that the policies are so broken that one can't properly synchronise a MTP device via the USB port because some idiot stuffed up the permissions, have the NVIDIA and ATI drivers cock up because of incompatibility.
I'd sooner Ubuntu wait and merge SELinux once all the various parts are actually compatible with it, rather than ramming it into the distro and saying, 'tough luck' to all those end users who suffer because of that decision.







Member since:
2005-11-12
How else are you supposed to say it?, I was told to post it as a bug report.
Nice to see that Ubuntu takes security seriously, NOT. If they cannot even do something as simple as that then there in trouble. Remember XP when it came out, it was not much better, atleast XP SP2 has this by default now after the moaning about how poor XP security was.
Do Ubuntu users take security seriously are they mostly Windows users now that are used to crappy security by default!