[Bug 1987162] Re: 43: New Device Security feature is confusing and unhelpful currently
Also note that there is no requirement to have Secure Boot enabled in Cyber Essentials. -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gnome-control-center in Ubuntu. https://bugs.launchpad.net/bugs/1987162 Title: 43: New Device Security feature is confusing and unhelpful currently To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-control-center/+bug/1987162/+subscriptions -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 1987162] Re: 43: New Device Security feature is confusing and unhelpful currently
@billdietrich444 Note: my comment is a trolling attempt, and hopefully an obvious one due to the choice of an obviously unimplementable-in-a-useful-way standard. Please take only 10% seriously. It may be a good idea to stop talking about pure security according to our own set of criteria (because it's up to discussion what's good enough) and start talking about compliance to recognized standards. We can start with the UK standard named Cyber Essentials, which is required for all organizations that need to deal with the UK government. The standard itself is available at https://www.ncsc.gov.uk/files/Cyber- Essentials-Requirements-for-Infrastructure-v3-0-January-2022.pdf It has the following testable requirements related to technical controls: * Firewalls - we can check that the firewall is installed and configured to "block unauthenticated inbound connections by default". * Secure configuration - this also includes removing unneeded or unused services (and this means that it is forbidden to run the SSH server unless there is a documented business need) and uninstalling unused software. So we might want to display when each piece of software was last used so that to ease the audit. Another testable requirement is that any auto-run feature is disabled or configured to "ask". And also there are some checkable requirements related to device unlocking. * User access control - we could list administrative accounts. Also, if a fingerprint reader is detected, or another form of 2FA is available, we can list all all non-enrolled accounts as non-compliant. We can also check if the password quality requirements are implemented and the mandatory unsuccessful login throttling (or lock-out) policy is enforced by PAM. * Malware protection - with specific requirements, related to on-access scanning of all files (including those on network shares, so sorry, ClamAV is not compliant) and web pages. This was the reason I had to tell one of my clients that they have to stop using Linux or stop dealing with the UK government. * Security update management - we can check Ubuntu-specific settings related to the freshness of the database, whether a reboot is needed for something to apply (e.g. are there running copies of deleted and replaced binaries, or do they use deleted libraries), and whether the updates are configured to install automatically. * Backups - we can test whether they configured through known backup applications. -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gnome-control-center in Ubuntu. https://bugs.launchpad.net/bugs/1987162 Title: 43: New Device Security feature is confusing and unhelpful currently To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-control-center/+bug/1987162/+subscriptions -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 638749] Re: enters infinite loop on entering certain date formats
The same bug also exists in gedit 3.0.6 in Gentoo -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gedit in Ubuntu. https://bugs.launchpad.net/bugs/638749 Title: enters infinite loop on entering certain date formats To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gedit/+bug/638749/+subscriptions -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 638749] Re: enters infinite loop on entering certain date formats
I am not a user of Ubuntu anymore, thus cannot test the version in Ubuntu. However, the bug is so simple that you should really test it yourself. And it does exist in version 2.30.4 in Gentoo. -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gedit in Ubuntu. https://bugs.launchpad.net/bugs/638749 Title: enters infinite loop on entering certain date formats To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gedit/+bug/638749/+subscriptions -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 638749] Re: enters infinite loop on entering certain date formats
** Attachment added: "Dependencies.txt" https://bugs.launchpad.net/bugs/638749/+attachment/1587180/+files/Dependencies.txt -- enters infinite loop on entering certain date formats https://bugs.launchpad.net/bugs/638749 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gedit in ubuntu. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 638749] [NEW] enters infinite loop on entering certain date formats
Public bug reported: Binary package hint: gedit To reproduce: Start gedit in the ru_RU.utf8 locale (this is important! in this locale %p yields an empty string, in the C or en_US.utf8 locale it doesn't and thus the bug is not reproducible). Choose Правка > Вставить дату и время... (Edit > Insert Date and Time...) from the menu. Choose the Использовать другой формат (Use custom format) option. Try to enter %p in the provided box. Once you do so, gedit starts consuming 100% CPU and compiz dims its window. At this point, you don't have any other option except to kill gedit. Instead, gedit should process the provided date format and yield nothing. ProblemType: Bug DistroRelease: Ubuntu 10.04 Package: gedit 2.30.3-0ubuntu0.1 ProcVersionSignature: Ubuntu 2.6.32-24.42-generic 2.6.32.15+drm33.5 Uname: Linux 2.6.32-24-generic x86_64 Architecture: amd64 Date: Wed Sep 15 14:22:40 2010 ProcEnviron: PATH=(custom, user) LANG=ru_RU.utf8 SHELL=/bin/bash SourcePackage: gedit ** Affects: gedit (Ubuntu) Importance: Undecided Status: New ** Tags: amd64 apport-bug lucid -- enters infinite loop on entering certain date formats https://bugs.launchpad.net/bugs/638749 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gedit in ubuntu. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 146411] Re: gnect crashed with SIGSEGV
A user of another distro also hit this with gnometris. We debugged the
problem, here is the result.
static void games_sound_init (void)
{
GError *err = NULL;
g_assert (g_thread_supported ());
pipeline = gst_element_factory_make ("playbin", "playbin");
threads = g_thread_pool_new ((GFunc) games_sound_thread_run, NULL, 10,
FALSE, &err);
sound_init = TRUE;
}
The code doesn't check the return value of gst_element_factory_make(),
and that's the real bug. It returns NULL if there are no sound output
plugins installed.
I.e., in order for sound in GNOME games to be functional, the users must
install at least base and good plugins, and also ogg and vorbis plugins.
Note: I am not a user of Ubuntu, and will not help with this bug
further.
--
gnect crashed with SIGSEGV
https://bugs.launchpad.net/bugs/146411
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is a bug assignee.
--
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
