Information security
fromTechzine Global
4 hours agoNew vulnerabilities affect printing software on Linux and Unix
Two new vulnerabilities in CUPS allow remote code execution and full system control without login credentials.
The vulnerabilities exploit a confused deputy attack. An unauthorized user can manipulate a privileged process to perform actions on their behalf, without having the necessary rights themselves. Specifically, attackers abuse tools such as Sudo or Postfix to modify AppArmor profiles via pseudo-files such as /sys/kernel/security/apparmor/.load and .replace.
I've had several incarnations of the self-hosted home lab for decades. At one point, I had a small server farm of various machines that were either too old to serve as desktops or that people simply no longer wanted. I'd grab those machines, install Linux on them, and use them for various server purposes. Here are two questions you should ask yourself:
A few months ago, I decided to breathe new life into a 2019 Dell XPS 15 that had been collecting dust for a couple of years. Despite its (at the time) high-end Core i7 CPU and 32GB of RAM, Windows was frustratingly slow on it. The fan was constantly at full throttle even when the machine was idle, and it regularly failed to install updates.
You may have noticed that many European Union (EU) governments and agencies, worried about ceding control to untrustworthy US companies, have been embracing digital sovereignty. Those bodies are turning to running their own cloud and services instead of relying on, say, Microsoft 365 or Google Workspace. If you prize your privacy and want to control your own services, you can take that approach as well.
When I talk to users looking to make this leap, the first thing I want to discuss is the desktop environment. After all, I'd rather not send Windows users to a distribution that uses GNOME, hyprland, i3, or any other DE that in no way resembles Windows. Recently, I stumbled upon a distribution called VailuxOS that uses KDE Plasma to create a somewhat Windows-esque desktop that would make any user of a Microsoft OS feel right at home.
The FreedomBox project, kicked off by original FSF legal boffin Eben Moglen, aims to make it easy to run your own private server, and get your files, photos, email, and other data out of the enfolding pseudopodia of giant cloud providers (mostly based in the USA) and into your own home. You can buy hardware with the software preinstalled, or download installation media, but there's another and maybe more appealing option: one of Debian's built-in Blends.
Because of that, you need to be very familiar and comfortable with the command line. Or you can install a desktop environment. In my opinion, this is the single easiest way to make Ubuntu Server easier, especially if you're relatively new to Linux. Having a GUI desktop will strip away the fear of having to use the command line, because you'll have plenty of apps to use (such as the file manager, user manager, GUI app store, and much more).
We have already discussed in the previous two articles about file and folder permissions along with special permissions that are supported in linux. The permissions are effective for many scenarios. But what happens when you need more granularity? How do you grant write access to a file to just one specific user who isn't the owner and isn't in the owning group? How do you allow two different groups read access, but only one of them write access?
FreeBSD is a Unix-like operating system that is descended from the Berkeley Software Distribution. The first version of FreeBSD was released in 1993 and was developed from 386BSD, one of the first fully functional and free Unix clones on affordable hardware. Since its inception, FreeBSD has been the most widely used BSD-derived operating system. FreeBSD maintains a complete system: kernel, device drivers, userland utilities, and documentation.
Manjaro is a sweet Arch-based Linux distribution, and it has the fans to prove it. Manjaro is designed to take Arch to new heights of user-friendliness, and it succeeds quite well. Of course, there are always those who believe everything can be improved, which is why a small team of developers decided to fork Manjaro and create Elegance. The beauty of Elegance isn't in the UI, although the developers have made Cinnamon look pretty good.
A trade-free operating system, that's what Tromjaro means. But what does a trade-free operating system have to offer? Well, it means a lot, especially if you're tired of the imbalance between those who have versus those who want. From the developers' perspective, this "trade-free" OS wants nothing from its users, such as no data collection and no demands for attention: "This is the purest form of free and the most honest one."