Distro is Insecure: Ubuntu (linux-mag)

Your Distro is Insecure: Ubuntu

Ubuntu Server has one of the cleanest and easiest Linux distribution installers. However, in many cases, its designers choose to ignore security in favor of ease-of-use. The result? An install that is not secure by default.

-----------------------------------------------

During the last couple of years, Linux distributions have focused on improving the installation process of Linux in order to make the freely available operating system available to more people. It’s a noble goal, however, when making anything in computing easier, a common approach is to make a number of decisions for the user — decisions that can put an inexperienced (and possibly an experienced) Linux installer at risk.

* * * Permissions open by default? In a rather odd twist, since the directory is wide open, the installer attempt to plug the hole by providing the option to encrypt a private directory! * * *

One of the quickest way for hackers to access systems are to use services that are not well documented or well understood. Once a system is in production, it is often unlikely the system will be further hardened so additional risk is created by not addressing services that are typically not being used.

------------

Summary

Ubuntu has one of the cleanest and easiest Linux distribution installers;
 however, its designers choose to ignore security in some areas.
Although these issues can be addressed post install in most cases, the install is not secure by default.

---------------------------------------------
Source:
http://www.linux-mag.com/id/7297

http://www.linux-mag.com/id/7297/2/

---------------------------------------------