Linux security relies a lot on having people use accounts with limited perms (at least unless you provide a password for root/sudo) but recently there has been a lot of privilege escalation bugs discovered. SELinux: a nightmare to actually configure properly obviously resulting in it not being properly configured in a lot of cases. Apparmor: can give some added security but like apparmor it's a nightmare to configure and very often it will not work the way you actually want it to work. But you very much want added security if you use something like wine since that works with windows malware as well. Canonical pushed people towards their snap store only to have said store end up full of malware. Hackers even registered abandoned developer domains allowing them to push out a lot of malware to people. AUR: you are supposed to read the PGBBUILD file to verify that it isn't malware but how many people actually bother doing that?
>>108821901Are you one of those Indian women that work for microsoft??
>>108821983I'm a septic tank.
>>108821901Those are glowfag backdoors and they get patched.Thats a good thing.Would you rather have a proprietary OS with unpatched backdoors?
>Apparmor: can give some added security>but like apparmor it's a nightmarekys dirty fag
>>108821983Kike Peter theil shill thread
>>108821901OpenBSDand/or microkernelsthat is the future
>>108821901Well it's still much more secure than WindowsLinux>flatpak apps with good isolation and permission control>custom isolation with firejail or bwrap>windows software resides in wine prefixes without any special privileges>opensnitch for traffic controlWindows>Win32 programs have access to everything including browser passwords>UWP apps that were supposed to solve this failed spectacularly>everything requires admin access to install>no good package system except CLI-only winget>requires external antivirus software to be at least somewhat secureLinux's main problem is the monolithic kernel, but you can partially solve it by blocking automatic loading of modules which is why my computers weren't vulnerable to these exploits anyway. You lose plug&play functionality and have to load modules manually, but you reduce attack surface a lot.
>>108822931>>everything requires admin access to installno for at least the last 15 years
OHNONONONONO
