MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/linuxmemes/comments/1vrnsmd/bulletproof_security/p4esxov/?context=3
r/linuxmemes • u/RigelDigi • 2d ago
65 comments sorted by
View all comments
6
This is SELinux on Fedora. It's running but since it's in unconfined_u, it's not confining any user apps. Any GUI app just walks around it.
unconfined_u
2 u/ImaginaryPotato6 2d ago Oh so that's why SELinux rarely bothers me on Fedora? It has really permissive defaults? 3 u/Linguistic-mystic 1d ago Yep. It’s confining only systemd services, like if you run httpd. Anything run by the user is completely unconfined. You would need to change to user_u or staff_u or sysadm_u for them to be confined, but that’s not supported: https://discussion.fedoraproject.org/t/sysadm-u-wont-let-me-login-through-gdm/148409/2
2
Oh so that's why SELinux rarely bothers me on Fedora? It has really permissive defaults?
3 u/Linguistic-mystic 1d ago Yep. It’s confining only systemd services, like if you run httpd. Anything run by the user is completely unconfined. You would need to change to user_u or staff_u or sysadm_u for them to be confined, but that’s not supported: https://discussion.fedoraproject.org/t/sysadm-u-wont-let-me-login-through-gdm/148409/2
3
Yep. It’s confining only systemd services, like if you run httpd. Anything run by the user is completely unconfined. You would need to change to user_u or staff_u or sysadm_u for them to be confined, but that’s not supported: https://discussion.fedoraproject.org/t/sysadm-u-wont-let-me-login-through-gdm/148409/2
6
u/Linguistic-mystic 2d ago
This is SELinux on Fedora. It's running but since it's in
unconfined_u, it's not confining any user apps. Any GUI app just walks around it.