As a proposal to increase the security of Ubuntu for new users, improve the overall user experience, and dramatically reduce the probably of receiving malware, I hereby propose that Ubuntu create two versions of each new release: Ubuntu, and Ubuntu S Mode.
What is S Mode? Quite simply, it is Ubuntu with the following changes:
- A patched version of APT with hard-coded repository URLs and “acceptable” packages, no ability to add new packages, forced automatic updates
- As many packages as possible distributed through the Snap Store
- bash and bash shell UI patched to disable running anything through the command prompt that is not a Snap application or a pre-installed application from APT
With this new hybrid approach, all application installs are locked to Snap, while still allowing for classic applications (e.g. GNOME desktop) that the system requires to be still available. By disabling the execution of anything that is not a Snap and not on the safe list, getting viruses is next to impossible. And in the unusual chance that malware is distributed through Snap, it is an automatic update away from being resolved.
This new hybrid approach will also increase competition among app developers while helping solidify Snap as the universal Linux packaging system. Developers and pro users will also be able to disable S Mode at any time, which will still keep Snap apps locked to the Snap Store while allowing users to add new packages through APT.
S Mode: Simple to implement, enhanced security for normal users, better developer story, and simple to disable. What could go wrong?
This proposal is satire, and meant to tie-in to the External repositories conversation.