Conversation

Notices

1. Embed this notice
   iced depresso (icedquinn@blob.cat)'s status on Friday, 02-Feb-2024 10:32:54 JST iced depresso
   does selinux make any sense on a game host
   will that make my life beyond miserable
   should i accept apparmor in to my life
   • Embed this notice
     iced depresso (icedquinn@blob.cat)'s status on Friday, 02-Feb-2024 10:40:11 JST iced depresso

     in reply to

     • whiteline
     @whiteline having to make rules is true of every security suite though.
     
     what i need to know is if ex. selinux is particularly more bullshit than tomoyo.
     
     apparmor is better than nothing but it has escapes :blobcatgrimacing:
   • Embed this notice
     whiteline (whiteline@shitposter.club)'s status on Friday, 02-Feb-2024 10:40:12 JST whiteline

     in reply to
     @icedquinn selinux rests on sheer manpower and labor to create rulesets for each app, it is extremely a DoD/big corp solution
   • Embed this notice
     iced depresso (icedquinn@blob.cat)'s status on Friday, 02-Feb-2024 10:59:19 JST iced depresso

     in reply to

     • whiteline
     • Mitch Conner
     @olmitch @whiteline bubblewrap is what powers flatpak. you can use it with bwrap.
     
     there is also firejail which is intended to be used by people, where bwrap is more meant to be backend stuff that you happen to be able to use.
   • Embed this notice
     Mitch Conner (olmitch@shitposter.club)'s status on Friday, 02-Feb-2024 10:59:20 JST Mitch Conner

     in reply to

     • whiteline
     I was looking into Linux sandboxing and was lead to flatpak; I stopped my research and went for a walk