SELinux is unmanageable; just turn it off if it gets in your way
I’ve been an SELinux complexity apologist for years. Lately, I’ve concluded that every implementation with difficult-to-configure policies is just unmanageable.
A personal blog mostly on everyday tech.
Visit ctrl.blog → RSS feedOn Hacker News Dec 2017 – Sep 2023
Security & Privacy 13Web & Frontend 9Society, Policy & Culture 9Tools & Productivity 7Systems & Performance 6Tech Industry & Business 5
I’ve been an SELinux complexity apologist for years. Lately, I’ve concluded that every implementation with difficult-to-configure policies is just unmanageable.
The systemd-analyze security command gives your systemd service units an automated security rating. This is a good starting point for security hardening.
Take manual control of your Linux system’s DNS resolution and keep programs from interfering with and overwriting your resolv.conf file.
Take manual control of your Linux system’s DNS resolution and keep programs from interfering with and overwriting your resolv.conf file.
After the initial learning curve, I found that Cardboard WM help me stay focused on one task and it greatly reduced how much time I spent rearranging my windows.
I experienced intermittent stuttering when my PC ran Linux and Windows. A mix of hardware, firmware, and driver issues created a difficult to diagnose problem.