cross-posted from: https://sh.itjust.works/post/62361303

Hello good people.

Is no one afraid of Bazzites auto updating nature?

I am myself worried about the potential for well timed supply chain attacks from wherever they build their OS images, which somehow build malicious images or just gets itself into the normal image builds and we auto update to.

Is this an unfounded worry? Does anyone know of the security measures in place to prevent attacks?

Auto update just feels weird to me, especially for something like my OS. I’m asking because I went and installed it and realised auto updating seems to be their philosophy… which is scary?

p.s. i couldnt find anyone online discussing this

Thonks

  • novafunc@discuss.tchncs.de
    link
    fedilink
    arrow-up
    3
    ·
    4 hours ago

    You’re forgetting that Universal Blue doesn’t just ship Fedora stuff.

    They include stuff from Homebrew and Flathub out of the box.

    Homebrew shipped the backdoored xz library while (by luck) Fedora stable didn’t.