8. Closely related to 7: The sheer complexity of Linux's various "mandatory access control" modules - SELinux, AppArmor, etc - leads me to believe that most people are better off not only not using them, but configuring them out of the kernel.
I don't know what the *BSD equivalents are, or if they even have any, but if they do I suspect they're equally complex, because the people who *want* this feature have complex needs.
Zack Weinberg
npub10u…hq50j
2025-08-29 17:23:47 UTC
in reply to nevent1q…u6xs
Author Public Key
npub10u5ldr5qv22nnlc56pg25allladfwyxxpyxewu5vc9np3m7kz5jqehq50jSeen on
wss://relay.momostr.pinkPublished at
2025-08-29 17:23:47 UTCEvent JSON
{
"id": "ed33b68dd6596b74b576ea623852b7d8e76e04af1055587c7da62202dcae4356",
"pubkey": "7f29f68e80629539ff14d050aa77ffff5a9710c6090d97728cc16618efd61524",
"created_at": 1756488227,
"kind": 1,
"tags": [
[
"proxy",
"https://masto.hackers.town/@zwol/115113212470665678",
"web"
],
[
"p",
"7f29f68e80629539ff14d050aa77ffff5a9710c6090d97728cc16618efd61524"
],
[
"e",
"6627d3f74203983bbe4184bab1b96c73688c81116cf07f1f86d5083dc3fa924a",
"",
"root",
"7f29f68e80629539ff14d050aa77ffff5a9710c6090d97728cc16618efd61524"
],
[
"e",
"26a9da29f23a5e0dbd80f39e1d6056fcaa9dc0300d1d6421cc6ece9d521e30a3",
"",
"reply",
"7f29f68e80629539ff14d050aa77ffff5a9710c6090d97728cc16618efd61524"
],
[
"proxy",
"https://masto.hackers.town/users/zwol/statuses/115113212470665678",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://masto.hackers.town/users/zwol/statuses/115113212470665678",
"pink.momostr"
],
[
"-"
]
],
"content": "8. Closely related to 7: The sheer complexity of Linux's various \"mandatory access control\" modules - SELinux, AppArmor, etc - leads me to believe that most people are better off not only not using them, but configuring them out of the kernel.\n\nI don't know what the *BSD equivalents are, or if they even have any, but if they do I suspect they're equally complex, because the people who *want* this feature have complex needs.",
"sig": "c6225ff10b587710da03ddd43145c2a0c9b3f4f364ec6203522d1a1623bfc4de5327457f7753537ed0cd6e78297680a4248cf9e4f7a7ec134edfca963645a7e2"
}