At the beginning of this year we noticed that the Deepin Desktop as it is currently packaged in openSUSE relies on a packaging policy violation to bypass SUSE security team review restrictions. With a long history of code reviews for Deepin components dating back to 2017, this marks a turning point for us that leads to the removal of the Deepin Desktop from openSUSE for the time being.
  • carzian@lemmy.ml
    0·
    1 day ago

    I had no idea that (open)SUSE was so security minded in their packaging. It makes sense in retrospec. It sucks they didn’t catch this earlier, but this response makes me happy to use tumbleweed

    • barryamelton@lemmy.world
      0·
      23 hours ago

      Barring Arch, and boutique distros, other distros normally have even better packaging standards than opensuse. By far.

      • Mike@lemm.ee
        0·
        21 hours ago

        No they don’t. OpenSUSE, especially tumbleweed, is way more security-focused than other distros.

        It’s a very low-trust default install, and it takes some work to get things through the firewall. Compare that to Fedora where every port above 2025 is open by default.