The new version of Debian 10 called “Buster” was released on July 6, 2019. Our SyncWeb team has already added the ability to install this version of the OS on our VPS. According to developers, in addition to updating most of the programs and packages, a lot of work has been done to improve security. Here is a list of other features in the new version:
AppArmor is installed and enabled by default
AppArmor is an alternative to SELinux and is a profile-based file access control system. Profiles can allow or deny programs access to various resources. AppArmor complements the traditional DAC (discretionary access control) Unix model and provides MAC (mandatory access control). It is easier to understand and learn compared to SELinux.
Network filtering based on nftables
Many system administrators know and use iptables, which have gained new features, which in turn gave rise to new issues. In this regard, nftables was implemented to replace it as well as ip6tables, arptables and ebtables.
UEFI Secure Boot support
Support for Unified Extensible Firmware Interface (UEFI) has been introduced in Debian 7. With each new release, enhanced features have been added and Secure Boot support is now available out of the box. Secure Boot is a feature included on many modern computers that prevents unsigned code from running, thus protecting against bootkit and rootkit.
Rust Programs
Buster is the first release of Debian that comes with many programs and libraries written in the Rustc 1.34 programming language.
Advanced APT capabilities out of the box
All methods provided by APT can use the isolated seccomp-BPF software environment. Apart from this, the https method is already enabled and does not require a separate installation.
Automatic updates for stable versions
Support for automatic updates of stable and security package versions is included.
We have omitted many other nice features in the new Debian 10 release, such as the use of Wayland graphics server instead of Xorg in GNOME, but you can always try them yourself on the official website of the OS.