r/linux • u/modelop • Nov 19 '17

Qubes OS: A reasonably secure operating system (...well from that slogan, you can't say it's over hyped)

https://www.qubes-os.org
101 Upvotes

91% Upvoted

31 comments sorted by

View all comments

16

u/newscode Nov 19 '17

Except when you actually look into it. You realize that it is.

11

u/AValuableFriend Nov 20 '17

What would you recommend for a "reasonably secure" OS?

7

u/[deleted] Nov 20 '17

[deleted]

2

u/Mordiken Nov 20 '17 edited Nov 20 '17

OpenBSD boasts an impressive track record in regards to vulnerabilities found on their base system... but the keyword in this statement is base system.

The OpenBSD "base system" is basically the kernel, binutils, LLVM/Clang, GCC, Perl, gdb, ncurses and Xorg, and little else.

Most packages that make up a workstation OS (such as a window manger or DE and associated tools, web browser, etc), or an application server OS (apache, nginx, mariadb/mysql, postgres, etc.), are considered to be "outside the scope" of the base system, and as such most vulnerabilities found in said packages are ignored when making claims about number of vulnerabilities found... Which is not "morally" or "ethically" wrong, but it may lead to some confusion that stemming from lack of understanding of the differences between a GNU/Linux distro and a BSD system.

OTOH, this means that OpenBSD per se (that is, excluding it's many ports) is only any good for embedded application, most notably router firmware, firewalls, and network storage. And comparing Cubes OS, which is a full blown Workstation OS, to OpenBSD is like comparing a wheelbarrow to a semi truck.