Just had my first disagreement with a coworker.
It was all about #SELinux.
Come to find out, the issue wasn't even about that.
A file was just missing.
I'm now sitting in my comfy chair trying to calm down.
@opensuse Tumbleweed rolling release moves from AppArmor to SELinux for its underlying security layer
https://www.linux-magazine.com/Online/News/openSUSE-Tumbleweed-Ditches-AppArmor-for-SELinux
#openSUSE #Tumbleweed #AppArmor #SELinux #Linux #OpenSource #distro #FOSS #security
I hope #SELinux improved its usability since the last time I had to literally invoke Cthulhu to make it work in a moderately sane basis.
https://9to5linux.com/opensuse-replaces-apparmor-with-selinux-on-new-tumbleweed-installations
@kde@floss.social @kde@lemmy.kde.social
Thx for the info, then it is like that.
Here is the goal proposal
https://phabricator.kde.org/T17370
Tbh, #bubblewrap would need to be fixed drastically to be as secure as the #Android #sandbox. And (I am not sure yet) I think even #Snaps are more secure (on #Ubuntu with #Apparmor patches) than #Flatpak with the current system.
As far as I understood, sandboxing needs to happen in #userspace, with tools like #fuse doing the work while being restricted by #MAC like #SELinux or Apparmor.