• 0 Posts
  • 68 Comments
Joined 8 months ago
cake
Cake day: August 20th, 2024

help-circle
  • socsa@piefed.socialtoLinux@lemmy.mlWhy do we hate SELinux?
    link
    fedilink
    English
    arrow-up
    0
    ·
    12 days ago

    SELinux isn’t really meant to be a user space “utility,” for lack of a better term. It’s meant to be an expert focused security framework for those with the expertise to both understand and implement robust security policies. Your average user daily driving Linux or even running a few self hosted services doesn’t really need complex security policies, and is definitely better served by some simpler tools.













  • Yeah I guess for me I don’t really trust any admins. At the end of the day that’s a permanent database of user activity which could be passed along to anyone, so ideally the minimum threat surface would be that it exists only on the home instance.

    Also, I kind of just don’t get the point of obfuscating for some and not others unless there are some politics going on behind the scenes, which just gives me even more cause for concern. I think this is a killer feature for piefed and really addresses a major concern I have with Lemmy so it is just disheartening to hear that the functionality has been nerfed for seemingly no good reason.