openSUSE Leap adds a new security layer: Immutable mode
One of the more secure Linux distributions has added another feature to help further lock it down.
openSUSE Leap, a popular Linux distribution, has introduced a new security feature called "Immutable Mode" in version 16.1. This feature provides a transactionally updated system with a read-only root filesystem, making it a "transactionally updated system." The official openSUSE blog explains that this is similar to Leap Micro, a specialized operating system designed for containerized workloads, edge computing, and virtualized environments, but integrated directly into Leap.
Immutable Mode is designed not only for specialized deployments but also for anyone who prefers atomic updates on the desktop. When enabled, the root file system is mounted as read-only, preventing alterations to directories like /usr and /etc. This security improvement ensures that even after a malicious script is executed, it cannot modify anything in those immutable directories, enhancing system security.
Additionally, openSUSE Leap already includes several security-focused features such as SELinux, firewalld, binary hardening, permission profiles, and Btrfs snapshots.
Written by urgent.news from ZDNet's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
