nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqtdpjx7wpsg7stzgaj0lvdc7cpj4almh2gv2gft2l3xlxml3v7kdq2mle0h (nprofile…le0h)
Do you plan on doing more #SELinux hardening than #Fedora does?
Because how it is, SELinux on Fedora just makes #run0 a pain to use, while user processes are all unconfined, making it pretty pointless.
Or do you plan on making it user friendly?
There are many issues with #Flatpak that should be addressed. Alternatively, #UID #Sandboxing using #SimpleSandbox and SELinux could be used, which is way simpler and more secure, but relies on native packages
https://wiki.gentoo.org/wiki/Simple_sandbox
boredsquirrel
npub1vx…dnstq
2025-02-17 20:51:57 UTC
in reply to nevent1q…an5j
Author Public Key
npub1vxrf79dyk845m96uq3tqqf9nyv2awlgjkvapxhyne53wqyup68pq8dnstqSeen on
wss://relay.mostr.pubPublished at
2025-02-17 20:51:57 UTCEvent JSON
{
"id": "d710429d201115ac557f26f00857eb4cbb9e1472aa1781743f9ac3d86ae5e79a",
"pubkey": "61869f15a4b1eb4d975c04560024b32315d77d12b33a135c93cd22e01381d1c2",
"created_at": 1739825517,
"kind": 1,
"tags": [
[
"p",
"5b432379c1823d05891d93fec6e3d80cabdfeeea431484ad5f89be6dfe2cf59a",
"wss://relay.mostr.pub"
],
[
"p",
"cda40d820e30d9ec967fda0cde8ddaf065e03f5b19e698a830e73a4c6653af23",
"wss://relay.mostr.pub"
],
[
"e",
"22d1a2f47959974245a719fadd4f5c35050342d3aa3521d3be626a6c093f8b72",
"wss://relay.mostr.pub",
"reply"
],
[
"t",
"selinux"
],
[
"t",
"fedora"
],
[
"t",
"run0"
],
[
"t",
"flatpak"
],
[
"t",
"uid"
],
[
"t",
"sandboxing"
],
[
"t",
"simplesandbox"
],
[
"proxy",
"https://tux.social/users/Rhababerbarbar/statuses/114021205143455561",
"activitypub"
]
],
"content": "nostr:nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqtdpjx7wpsg7stzgaj0lvdc7cpj4almh2gv2gft2l3xlxml3v7kdq2mle0h \n\nDo you plan on doing more #SELinux hardening than #Fedora does?\n\nBecause how it is, SELinux on Fedora just makes #run0 a pain to use, while user processes are all unconfined, making it pretty pointless.\n\nOr do you plan on making it user friendly?\n\nThere are many issues with #Flatpak that should be addressed. Alternatively, #UID #Sandboxing using #SimpleSandbox and SELinux could be used, which is way simpler and more secure, but relies on native packages\n\nhttps://wiki.gentoo.org/wiki/Simple_sandbox",
"sig": "619fe024d0eb1d022c1e542426096a0423ea0ef90ae7345f30ae6b4bee4b536d297343cbab31f3c968c7767c3511a564dbe734ff584453e187326b7c1025c718"
}