Improvement ideas (includes important security improvement)

[mcgiwer]

Here are my ideas:

Seperate run/instalation modes
[SECURITY] Minimal services
[SECURITY] Minimal users & groups
[SECURITY] Attack prevention


ad. 1:

Add following run/install modes:


Minimal - minimal system (without any additional software, etc.) with GUI
Normal - actual running/install mode
Virtualization - GUI (without any additional software) + enviroment (kernel and library's) for running virtual machines


ad. 2:

SECURITY IMPROVEMENT

By running or installing Ubuntu there should be run/installed only services with are absolute required for running of Ubuntu. None else services should be run/installed, because they are creating an security risk

ad. 3:

SECURITY IMPROVEMENT

In running/installed Ubuntu should be only absolute nessecary users and groups with are required for proper Ubuntu work. Any additionally users/groups are creating an security risk.

ad. 4:

SECURITY IMPROVEMENT

Ubuntu should have installed and running an firewall and IDS. Additionally there should be an possibility to manage (add, remove, etc.) ports and protocols.

Note: any unused and/or risky ports and protocols should be default closed and blocked