this post was submitted on 15 Dec 2025
98 points (100.0% liked)
Linux
10644 readers
423 users here now
A community for everything relating to the GNU/Linux operating system (except the memes!)
Also, check out:
Original icon base courtesy of lewing@isc.tamu.edu and The GIMP
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
To be fair. SELINUX always seems like THE answer with flexibility it provides with App armor being just SELINUX light...
It would make more sense to me to have better support for leveraging SELINUX primatives to accomplish the same things. I at least, don't know of any LSM features that can't be covered user:role:type:security level:catagorey and namespaces?
The issue is always that info is hard to know sometimes and programers can barely stop ourselves from running as root with all files in 777 mode let alone conceptualize those other attributes for files and services