Linux

56346 readers

723 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
No misinformation
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 6 years ago

MODERATORS

AgreeableLandscape@lemmy.ml

nooter692@lemmy.ml

MarcellusDrum@lemmy.ml

cypherpunks@lemmy.ml

cyclohexane@lemmy.ml

d3Xt3r@lemmy.nz

Is the Trinity Desktop Environment Secure? (www.trinitydesktop.org)

submitted 3 days ago* (last edited 3 days ago) by Tenderizer78@lemmy.ml to c/linux@lemmy.ml

34 comments fedilink hide all child comments

So, a while back I installed Xfce with Chicago95, but was disappointed. Xfce just doesn't vibe with me, and a strict emulation of Windows95 is not really what I wanted, I just wanted something that "felt" that classic.

So I was gonna give up and just use KDE, until I saw TDE. I think TDE is probably what I'm looking for but I'm concerned about using anything so minor because security.

It TDE secure (for personal use)?

Can a DE even be insecure, or are they all generally as secure as each-other as long as you follow the rules (trustworthy software, closed firewall, install patches fast, and disaster recovery plans)?

What vulnerabilities can a desktop environment even have (edit)?

you are viewing a single comment's thread
view the rest of the comments

[–] nyan@sh.itjust.works 10 points 3 days ago (3 children)

There are no open security bugs against TDE that I'm aware of—if there were, I'd expect them to be fixed in the next release. In my experience, the development team, while not huge, is active and competent.

I've been using TDE since a little while after Gentoo sunsetted KDE3, and I've had no issues. Just make sure your X server is secure—-nolisten and all that stuff—and don't try to use Konqueror as a web browser (it remains an excellent file manager), and you should be fine.

Wayland is "more secure" than X in that it makes less LAN contact by default and tries to sandbox programs from one another to an extent, just in case some future browser exploit that can copy random swathes of your screen tries to screenshot your password manager or something. There are no active exploits against a correctly-configured X server at this time that will magically vanish if you switch to Wayland, as far as I'm aware—it's more future-proofing stuff.

[–] Tenderizer78@lemmy.ml 5 points 3 days ago* (last edited 3 days ago) (2 children)

Thanks, that's a very clear response. I guess I basically can use it until X11 stops getting security updates. I wonder whether an X11 vulnerability can trigger a serious vulnerability even if it doesn't get security updates.

No idea what that -nolisten stuff is about. Is that to do with the firewall?

[–] nyan@sh.itjust.works 5 points 3 days ago (1 children)

-nolisten is an actual option passed to the X server—your distro may do so by default—to work around a known security issue in some versions. I admit I'd have to look up the details, as it's been a couple of years since that issue was reported. Recent X versions almost certainly have a patch.

[–] Tenderizer78@lemmy.ml 2 points 3 days ago

I'd be kinda shocked if in, in 2025, any download of a DE opened X org up to remote connections by default. But I will double check.