Linux Archive

Linux Mint “generally very bad when it comes to security”

Over the weekend, news broke that Linux Mint's servers were compromised, and ISO images were replaced by compromised versions with a backdoor. Everything was made public, and int responded in the only way they could: disclosure, site taken down.

Sadly, it turns out that Linux Mint has somewhat of a bad name when it comes to security.

To conclude, I do not think that the Mint developers deliver professional work. Their distribution is more a crude hack of existing Debian-based distributions. They make fundamental mistakes and put their users at risk, both in the sense of data security as well as licensing issues.

I would therefore highly discourage anyone using Linux Mint until Mint developers have changed their fundamental philosophy and resolved these issues.

Let's hope this issue raises a number of red flags for the Mint team so they can start to take steps to better the situation.

Nayu OS: introducing Chromebooks without Google

NayuOS is an ongoing project at Nexedi: We are mainly using Chromebooks for our daily development work and wanted to have more customizable, secure and privacy-compliant devices - not running any proprietary software, because we love Free Software. A few experiments later NayuOS - our free alternative to Chrome OS - was born. NayuOS is currently on a good enough way to meeting most of our needs, so we decided to spread the word and share what we have done so far.

Linux 4.4 released

Linux 4.4 has been released This release adds support for 3D support in virtual GPU driver, which allows 3D hardware-accelerated graphics in virtualization guests; loop device support for Direct I/O and Asynchronous I/O, which saves memory and increases performance; support for Open-channel SSDs, which are devices that share the responsibility of the Flash Translation Layer with the operating system; the TCP listener handling is completely lockless and allows for faster and more scalable TCP servers; journalled RAID5 in the MD layer which fixes the RAID write hole; eBPF programs can now be run by unprivileged users, and perf has added support for eBPF programs aswell; a new mlock2() syscall that allows users to request memory to be locked on page fault; and block polling support.

There are also new drivers and many other small improvements. Here is the full list of changes.

Review: Mint 17.3 may be the best Linux desktop distro yet

Linux Mint 17.3 is the final Mint 17 release and should put to rest any worries about Mint's plan to stick with Ubuntu LTS releases for its base. Mint has done what it set up to do, namely improve the Cinnamon desktop to the point that it not only matches, but in many places far exceeds the user experience found in other options like GNOME, and especially, Unity.

Indeed, it's hard to look at Mint 17.3 without comparing it to its upstream base. While Mint has been continually working hard on the desktop and cranking out release after release, Ubuntu has stagnated. If Ubuntu wants to leapfrog past some of its pain points, its developers would do well to look downstream. Mint's package management tools are simpler, more comprehensive, and easier to use than anything Ubuntu offers. Mint also manages to do all this without anything even remotely close to the resources Ubuntu enjoys.

Running a mainline kernel on a cellphone

One of the biggest freedoms associated with free software is the ability to replace a program with an updated or modified version. Even so, of the many millions of people using Linux-powered phones, few are able to run a mainline kernel on those phones, even if they have the technical skills to do the replacement. The sad fact is that no mainstream phone available runs mainline kernels. A session at the 2015 Kernel Summit, led by Rob Herring, explored this problem and what might be done to address it.

This indeed a big problem, and I'm glad it's finally being picked up.

Microsoft has built a Linux distribution – sort of

Late last week, hell had apparently frozen over with the news that Microsoft had developed a Linux distribution of its own. The work was done as part of the company's Azure cloud platform, which uses Linux-based network switches as part of its software-defined networking infrastructure.

While the software is real, Microsoft isn't characterizing it as a Linux distribution, telling us that it's an internal project. That's an important distinction, and we suspect that we're not going to see a Microsoft Linux any time soon.

Microsoft BeOS, and the world will be just.

bcachefs: a general purpose COW filesystem

For those who haven't kept up with bcache, the bcache codebase has been evolving/metastasizing into a full blown, general purpose posix filesystem - a modern COW filesystem with checksumming, compression, multiple devices, caching, and eventually snapshots and all kinds of other nifty features.

I'll admit I had to do a bit of reading to educate myself on what bcache actually is. Fascinating to see that it has evolved into a full-blown file system.

How To Install VirtualBox 5.0 In Ubuntu/Linux Mint Or Other Derivatives

Most of us know what virtual machines are but for those don't know, virtual machines are the kind of software that allow users to run other operating system within current operating system. It's the favorite for everyone to taste other operating systems without going away from main operating system. In this article I'll show you how to installPicture VM VirtualBox 5.0 in Ubuntu 15.04/14.10/Linux mint Rafaela or other derivatives. Read more

Five Best Linux Desktop Environments

As with many things Linux-related, the variety of desktop environments is both a strength and a weakness. For new users, the decision of which DE to use can be a hard one. To help, the folks at Linux and Ubuntu have compiled a list of their top five. In typical fashion, partisans for the DEs that were left out were quick to advocate for their favorites in the comments. (I post this mostly to give OSNews readers the opportunity to opine on how wrong they are).

Linux kernel 4.0 released

Feature-wise, 4.0 doesn't have all that much special. Much have been made of the new kernel patching infrastructure, but realistically, that not only wasn't the reason for the version number change, we've had much bigger changes in other versions. So this is very much a "solid code progress" release.

Despite the version number, not a big deal.

An introduction of library operating system for Linux

Our objective is to build the kernel network stack as a shared library that can be linked to by userspace programs to provide network stack personalization and testing facilities, and allow researchers to more easily simulate complex network topologies of linux routers/hosts.

Although the architecture itself can virtualize various things, the current design only focuses on the network stack. You can benefit network stack feature such as TCP, UDP, SCTP, DCCP (IPv4 and IPv6), Mobie IPv6, Multipath TCP (IPv4/IPv6, out-of-tree at the present moment), and netlink with various userspace applications (quagga, iproute2, iperf, wget, and thttpd).

Dell’s Linux PC sequel still “just works”, but it adds 4K screen

Sure - if you want a fast, well-built, well-equipped 4K laptop preloaded with Ubuntu, with most of the potential edge-case configuration issues already taken care of, with an active set of developers working to ensure that the necessary repos are kept current, and with an actual, for-real OEM warranty and support. The M3800 Developer Edition is what an OEM-loaded Linux laptop should be, and it's got the added bonus of being supported by Barton George and a small, dedicated group of Linux enthusiasts at Dell. Those folks are backed by Dell's significant resources and are in constant contact with Canonical.

The value proposition is pretty clear there, but the question is whether or not that value proposition is worth the extra money versus buying a less-expensive base laptop and loading the Linux distro of your choice. There's going to be a lot of overlap between the M3800 Developer Edition's target market and the segment of potential customers who have no problem with just rolling their own Linux installation on a Thinkpad or even on a MacBook. For those folks, how much is it worth to have Dell do the heavy lifting?

I guess the problem is this: a machine like this is for developers and enthusiasts. However, developers and enthusiasts have no issues with getting a cheaper model and installing and running Linux themselves. This puts this expensive Dell Linux laptop in a sort of demand limbo - which is sad, because it looks like a great machine.

Tails 1.3 released

Tails 1.3 has been released.

Tails is a live system that aims to preserve your privacy and anonymity. It helps you to use the Internet anonymously and circumvent censorship almost anywhere you go and on any computer but leaving no trace unless you ask it to explicitly.

It is a complete operating system designed to be used from a DVD, USB stick, or SD card independently of the computer's original operating system. It is Free Software and based on Debian GNU/Linux.

A Linux distribution aimed at privacy.

First fully sandboxed Linux desktop application

It's not a secret that I've been working on sandboxed desktop applications recently. In fact, I recently gave a talk at devconf.cz about it. However, up until now I've mainly been focusing on the bundling and deployment aspects of the problem. I've been running applications in their own environment, but having pretty open access to the system.

Now that the basics are working it's time to start looking at how to create a real sandbox. This is going to require a lot of changes to the Linux stack. For instance, we have to use Wayland instead of X11, because X11 is impossible to secure. We also need to use kdbus to allow desktop integration that is properly filtered at the kernel level.

Linux 3.19 released

Linux kernel 3.19 has been released.

This release adds support for btrfs scrubbing and fast device replacement with RAID 5&6, support for the Intel Memory Protection Extensions that help to stop buffer overflows, support for the AMD HSA architecture, support for the debugging ARM Coresight subsystem, support for the Altera Nios II CPU architecture, networking infrastructure for routing and switching offloading, Device Tree Overlays that help to support expansion busses found on consumer development boards like the BeagleBone or Raspberry Pi, support for hole punching and preallocation in NFSv4.2, and the Android binder has been moved from the staging area to stable; it also adds new drivers; and many other small improvements.

Here is the full list of changes.

Has modern Linux lost its way?

This is, in my mind, orthogonal to the systemd question. I used to be able to say Linux was clean, logical, well put-together, and organized. I can't really say this anymore. Users and groups are not really determinitive for permissions, now that we have things like polkit running around. (Yes, by the way, I am a member of plugdev.) Error messages are unhelpful (WHY was I not authorized?) and logs are nowhere to be found. Traditionally, one could twiddle who could mount devices via /etc/fstab lines and perhaps some sudo rules. Granted, you had to know where to look, but when you did, it was simple; only two pieces to fit together. I've even spent time figuring out where to look and STILL have no idea what to do.

systemd may help with some of this, and may hurt with some of it; but I see the problem more of an attitude of desktop environments to add features fast without really thinking of the implications. There is something to be said for slower progress if the result is higher quality.

Improving Linux networking performance

100Gb network adapters are coming, said Jesper Brouer in his talk at the LCA 2015 kernel miniconference. Driving such adapters at their full wire speed is going to be a significant challenge for the Linux kernel; meeting that challenge is the subject of his current and future work. The good news is that Linux networking has gotten quite a bit faster as a result - even if there are still problems to be solved.

Arch Linux on MacBook Pro Retina 2014

I'm going to describe steps needed to have the following system:

  • Dual-boot with Arch Linux / Mac OS X
  • Boot manager UEFI Gummiboot (simple, can handle several kernels easily)
  • Full disk encryption (Mac OS X and Arch Linux)
  • LVM support
  • Suspend to disk using a swapfile
  • Settings for a great battery life (~09h30)

I keep the Mac OS X partition, to be able to update the firmware later.

Incredibly detailed 'blog post' (I would call it a website) on how to get, well, Arch Linux running on the MacBook Pro Retina 2014. I know Arch is quite popular among OSNews readers, so I figured this would be of interest to some of you. The article is a work-in-progress, so more information is sure to follow.