What’s new in security for Ubuntu 26.04 LTS? | Ubuntu
ubuntu.com
Here’s a concise excerpt you can use:> Ubuntu 26.04 LTS significantly raises the security baseline by strengthening defaults across every layer of the system without requiring manual intervention. Key improvements include production-ready hardware-backed encryption, post-quantum–aware cryptographic defaults, modern TLS configurations, and […]

Highlights

  • Rust rewrite of GNU coreutils and sudo-rs
  • TPM-backed Full Disk Encryption now considered stable
  • More secure services (don’t run as root if not needed, AppArmor profiles)
  • AppArmor prompting for snaps is still experiemental unfortunately
    • Nobody@lemmy.worldOP
      8·
      22 hours ago

      Snap as a technology is so interesting and more versatile than other formats. It’s just unfortunate that Canonical is in charge of the project, they’ve made some baffling decisions and continue to shoot themselves in the foot.

      • ☂️-@lemmy.ml
        131·
        22 hours ago

        no closed down walled garden will ever be interesting or versatile

        • Nobody@lemmy.worldOP
          10·
          21 hours ago

          That’s part of what I mean. Snap could be so much more interesting and useful if not for Canonical doing stuff like only allowing one store and slacking on proper support for non-AppArmor distros.

          One of the more bizarre experiences I’ve had is that a Canonical employee packaged a version of a Minecraft launcher. It was absolutely garbage, didn’t even start. The first thing that comes to mind is that snap is just garbage. But for fun, I made my own package of it, and it just worked perfectly. Which just leaves me the question of why a Canonical employee who works on snap can’t create a good snap package.

          There’s also the weird fact that Ubuntu dropped the ball with its core24 runtime. For some reason, Canonical’s own snaps stuck to core22 up until this month. Like, why wouldn’t they upgrade to their latest runtime? If there was an issue with it, why has it been broken for 2 years? Doesn’t inspire trust.