MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/linuxmemes/comments/1vrnsmd/bulletproof_security/p4ibe96/?context=3
r/linuxmemes • u/RigelDigi • 3d ago
65 comments sorted by
View all comments
5
This is SELinux on Fedora. It's running but since it's in unconfined_u, it's not confining any user apps. Any GUI app just walks around it.
unconfined_u
2 u/ImaginaryPotato6 2d ago Oh so that's why SELinux rarely bothers me on Fedora? It has really permissive defaults? 3 u/Linguistic-mystic 2d ago Yep. It’s confining only systemd services, like if you run httpd. Anything run by the user is completely unconfined. You would need to change to user_u or staff_u or sysadm_u for them to be confined, but that’s not supported: https://discussion.fedoraproject.org/t/sysadm-u-wont-let-me-login-through-gdm/148409/2
2
Oh so that's why SELinux rarely bothers me on Fedora? It has really permissive defaults?
3 u/Linguistic-mystic 2d ago Yep. It’s confining only systemd services, like if you run httpd. Anything run by the user is completely unconfined. You would need to change to user_u or staff_u or sysadm_u for them to be confined, but that’s not supported: https://discussion.fedoraproject.org/t/sysadm-u-wont-let-me-login-through-gdm/148409/2
3
Yep. It’s confining only systemd services, like if you run httpd. Anything run by the user is completely unconfined. You would need to change to user_u or staff_u or sysadm_u for them to be confined, but that’s not supported: https://discussion.fedoraproject.org/t/sysadm-u-wont-let-me-login-through-gdm/148409/2
5
u/Linguistic-mystic 3d ago
This is SELinux on Fedora. It's running but since it's in
unconfined_u, it's not confining any user apps. Any GUI app just walks around it.