Can you really call your Linux setup secure if you're not running SELinux or AppArmor?
I only use the most powerful security tools, these include Common Sense™ and Not Being a Fucking Idiot™
>>107489566No but I also don't care.
>>107489566>Can you really call your Linux setup secure if you're not running SELinux or AppArmor?Of course, you don't need either of those softwares to be secure and safe.
>>107489566Iptables not good enough for you?
>>107489566i use nixos with hyprland, that is secure enough.whats the point of running selinux or apparmor??
>>107490480Your flesh wound is infected
ufw and firejail is all i need
>>107489566No, but no one maintains a distro that takes full advantage of either.Linux hobbyists are too distracted by the delusion of "openness", that maintainers wouldn't ever ship compromised libs (bbbut everyone SEES the code!), or that the shit C networking stack wouldn't have OOB writes
>>107491101Fedora uses SELinux and Debian and Ubuntu use AppArmor.
>>107491101Talking out your ass again retard?
selinux is fucking atrocious, i used to think systemd was the peak of bad linux software but selinux takes the fucking cake>try doing anything more advanced than running gui apps on fedora>selinux errors out the ass>look up the documentation>find a bunch of arcane shit>configuration is copy and pasting crap from the red hat docs and restarting selinux in hopes it eventually lets you do whatever you were trying to do before selinux started screamingthey make this shit complex and hard to use on purpose so that redhat can sell support for itno thanks, disable that stupid shit while setting up fedora or better yet, use a distro without it
>>107491250based
>>107489566I enjoy the added protection GNU+MX Linux provides with usbguard, because I don't trust those I live with, but I don't need anything more than that besides a firewall.
>>107491250based. also, i checked this yesterday, selinux being a shit mess to handle seems to be universal knowledge:https://www.youtube.com/watch?v=JFjXvIwAeVI
>>107491250>selinux is fucking atrociousNo. It's just you.It really doesn't get in my way, in the slightest, and when I attempt something completely non-standard, like clip up my bitcoin bricks, the resulting SEL error is reasonably explained in the SELTroubleshooter, with instructions for how to resolve the situation.A few sets of instructions, actually, for precisely how *you* want it resolving, as the precise behaviour is difficult to predict.>they make this shit complex and hard to use on purpose so that redhat can sell support for itBy which you mean create a tool that babies the idiots through the process to the point where only the most retarded can possibly fail?>no thanks, disable that stupid shit while setting up fedora or better yet, use a distro without itDid you ask the adult if you're allowed to use their computer?>>107491532>>107492061Based on what? Utter retardation?It's doing it's fucking job. Protecting the computer from stupid cunts. If you wasn't such a stupid cunt, you'd know that. And how to solve it.
