Highlights

  • Rust rewrite of GNU coreutils and sudo-rs
  • TPM-backed Full Disk Encryption now considered stable
  • More secure services (don’t run as root if not needed, AppArmor profiles)
  • AppArmor prompting for snaps is still experiemental unfortunately