How much more secure and private is Fedora than Ubuntu?

In terms of privacy is Cannonical getting only the list of snaps or there is more to that?
In terms of security how much as % would you say Fedora is better? From what i see Fedora has hardened kernel, selinux is better than apparmor and packages are more uptodate.
Does Ubuntu have nothing in terms of security? Is Apparmor actually doing anything on Ubuntu?

I just cannot assess how much would i gain by switching to Fedora :frowning:

I don’t think there is any objective metric against which to evaluate Ubuntu’s security and privacy with Fedora. Given the fragmented nature of Linux, you’ll have to first decide what privacy and security you want for what purpose with what Linux OS and DE element.

This is a very broad question so its harder to answer I feel. But that’s just my opinion on the matter as much as I understand about Linux.

Edit:

In other words, you also need to threat model. Its the first step in deciding what and how to use an OS for whatever purpose for which you want to use it.

3 Likes

No its not that. As the above post suggested it also depends on threat model and privacy needs. If you have a very higher threat model, then instead if fedora , something like qubes could better serve your purpose.
I am not a technical expert on linux security but ubuntu is based on debian and debian security team does a decent job at patching vulnerability and backporting any security fixes to their versions.
Latest and greatest may not necessarily mean you will be safer .
App armor shouldn’t be that bad compared to selinux.
But it also comes down to matter of preference and your use case for inux. If you are just using it for daily use at your home with limited applications installed any debian based distro would be sufficient for you .

But if you are hosting a linux server with some highly sensitive work on it , you may want to go for more hardened version like rhel or centos.

There are numerous reasons Ubuntu is not ideal for privacy, but it seems to be much better than Windows.

I don’t think you could accurately summarize it in a number. I’d say Fedora is mostly a good step up from Ubuntu, but it also suffers from various usability and security issues:

  • It has a much smaller community, meaning you’re less likely to receive tech support should you need it.
  • Fedora comes with very minimal proprietary software, meaning you may need to manually install additional proprietary drivers and codecs to have a usable experience.
  • Some programs are only officially built as .deb or Snap packages which cannot (or should not) be used on Fedora, forcing you to depend on unofficial builds which can risk security and stability.
  • You should avoid installing Chromium or Firefox based browsers as Flatpaks because it may weaken their sandboxing. (This supposedly isn’t an issue on Snap?)

A lot more is discussed in the Ubuntu vs Fedora thread. You don’t have to read the full thread, my original post and my conclusion should suffice.

The security benefits Fedora has over Ubuntu are unlikely to make a big difference in the grand scheme of “Linux insecurity”. Anyone super concerned about security on Linux would be better off with Qubes OS, which is impractical for most people. In my opinion you should only switch if you have the time and energy or if it somehow makes more sense for your threat model, otherwise just stick with Ubuntu.

1 Like

I agree, this is somewhat of an issue. However, if you spare time to research, then it should be smooth sailing. For example, I’ve learned a lot through my research and used online guides as a base for setting up my Fedora install.

If you don’t mind a recommendation, I’ve found Hacking the Hike to be a helpful guide when setting up a traditional Fedora install. Of course, it isn’t at all a library with all the information like the Arch Wiki, so there’s still bits of information scattered across the cosmos of the internet.

For Fedora Silverblue, which I’m currently using, I’d agree in that it is definitely a pain. Rebooting every single time I run rpm-ostree is something I want to forget. In contrast, for Fedora’s traditional editions, the process is much easier. Besides, wouldn’t it make sense to set aside some time to setup your operating system? I certainly wouldn’t do it on a whim or rush. So, it would not be bad at all to spend just a bit more time on that if the benefits outweighs the issues—and it does.

If you prefer a GUI:

Using the Snap for browsers is harmless.

From what I understand, I believe it’s particularly sufficient in a few areas, but not others. To note, I don’t have experience with Ubuntu, but it is on my list for distros to test out. So, who knows? Maybe my viewpoint will change once I use it for the first time.

Regardless, it’s important to remember that time and dedication is important. If you aren’t dedicated and motivated, you won’t be able to do anything productively and to your best abilities. With the motivation and dedication, you can do things far better. This is what I lightly mentioned in my post for that thread you linked.

2 Likes

100% agree, I only say it for users who don’t want to get into system administration and just want a desktop OS that’ll work out of the box with minimal issues. Same thing goes for other points you touch on:

  • An average user might not know what drivers and codecs are or that they need to install them manually, which itself is something they’d rather not have to do.
  • An average user wouldn’t know or want to learn what all the different packaging formats are, what containers are, and how to use them, especially if it’s done in a CLI (like Distrobox).

I came across this a while back and hadn’t tried it myself yet. I’m excited for what this can mean for the future, but based on this review it looks like it still requires some technical knowledge to understand what’s going on and how to use it. It isn’t something I could recommend to most of my friends but maybe some day we could have a Zorin OS-like experience where trying to install a .deb on Fedora will seamlessly install it in an Ubuntu container without the user having to know what is happening. (I wonder if there’s security implications with using Snap within an Ubuntu distrobox container on a Fedora host?)

That was my point, it’s a pro for Ubuntu that you don’t have to worry about this out of the box, but on Fedora you’d need to know to avoid Flatpak Chromium/Firefox browsers if security is a concern. As mentioned before, installing Snap also doesn’t look like a good solution for Fedora users and again it’s something a user would have to know to do.

I mainly judge operating systems for what they offer out of the box. Having obscure or time consuming workarounds which require prior knowledge to utilize do not change things for the average computer user. Most will not (and do not want to) develop more technical knowledge and perform manual configurations to their system. They’re mostly going to stick to default settings and operate entirely within what the GUI suggests they should do, such as installing apps from the graphical app store where the specific package they get is determined by the distro-selected app store.

1 Like