All distros should come with this
>>107082110>All distros should come with thisWhy? Explain your reason OP?
>>107082125because nsa said so.
>>107082125Because it sandboxes everything. Its just better to have.
>>107082110not wrong
>>107082110nsa backdoor?
>>107082110Use case?
>>107082156>Because it sandboxes everything. Its just better to have.Why not apparmor?
>>107082110All serious distros do.
>>107082110True! It's so simple but effective sadly only available by giga chad company distros, (or set it up yourself lmao), that care about their users (openSUSE, Fedora, Android). Imho it's even better than a AntiVirus, because it prevents Apps from doing shit, not just WHEN they are doing shit *altert* I know, you can make the argument "don't you trust your repo?" Sure, I do, but better safe, than sorry, people shit on chromeos, but there is a reason why they use the linux kernel and SELinux "but it's muh system, SELinux is from the gov!!!" nigger it's open sauce. "
>>107082194I'd use AppArmor on non rpm distros, because setting up SELinux is cancer.
>>107082110It's pretty good. Wish it was more obvious/intuitive when its the reason you cant run something but otherwise I'm impressed. Ive had this + fedora coreos for a while now and happy with how easy it is to manage. At my work as part of our general ansible playbook we disable selinux. Got hacked last year, not very good.
>>107082110AppArmor is better.
>>107082263>AppArmor is better.Do you actually believe that or do you just want to be contrarian?
>>107082194Because you have to set up the profiles manually then.
>>107082276>Do you actually believe thatYes, I do.SELinux gives you more granularity with labels instead of AppArmor's types, but this goes at the cost of complexity. And as shit growths, it becomes harder and harder to understand what is even going on with. So as result, you also now getting more holes that can be potentially pocked without your awareness; there's no way you understand all these rules. Or shit becomes too rigid to do anything useful. People then give it a try to wrestle the system, only to eventually realize what nightmare it actually is. And then do what >>107082250 described - they just entirely turn it off and move on.And yeah, AppArmor isn't as powerful, but it's very rarely stays in the way. And unlike SELinux I never had problems debugging it, to figure out what the problem is.
