• 0 Posts
  • 10 Comments
Joined 2 months ago
cake
Cake day: February 17th, 2025

help-circle
  • unhrpetby@sh.itjust.workstoLinux@lemmy.mlWhy do we hate SELinux?
    link
    fedilink
    English
    arrow-up
    35
    ·
    edit-2
    13 days ago

    Security is much more effective and adopted when it is simple. My understanding is that SELinux is not.

    This means not only will fewer people use it and more people turn it off if something doesn’t work, it means more people are at risk of misconfiguring their system to allow something they didn’t intend to.

    This is somewhat mitigated from the fact that, from my experience, Linux Security Modules cant ever make you less secure than without it. But it still can provide a false sense of security if you misconfigure it.

    Here is a good article showing what I am referring to, and providing a solid security tool: BSD pledge/unveil on Linux.




  • It can be done if you mess with the initramfs.

    The kernel starts everything else by unpacking an archive containing a minimal environment to set stuff up for later. Such as loading needed kernel modules, decrypting your drive, etc. It then launches, by default, the /init program (mines a shell script).

    That program is PID 1. If it dies, your kernel will panic.

    After it finishes setup, it execs your actual /sbin/init. These means it dies, and that program (systemd, openrc, dinit, runit, etc) becomes PID 1. If an issue happens, both could fail to execute and the kernel will loop forever.


  • unhrpetby@sh.itjust.workstoLinux@programming.devGIMP 3.0.0 tagged
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    1
    ·
    edit-2
    21 days ago

    Gnome shenanigans.

    The most hilarious part about how Anubis is implemented is that it triggers challenges for every request with a User-Agent containing “Mozilla”.

    If you have JavaScript disabled, this “challenge” is just a wall. They might’ve stopped bots, but they’ve stopped me too.


  • I’m excited for my cursor to not get trapped in a window anymore.

    On Wayland at least, u can completely disable pointer constraints. Thus, a game window freezes, it doesn’t lock your cursor in it.

    With X11, the only solutions I found were basically recompiling the X11 code. Thus, I deal with one game window making my cursor disappear and frozen inside itself, affecting all other Xwayland windows.

    Annoying and ridiculous. Hopefully not long before wine-wayland matures enough to fix this.




  • In my opinion, the internet seeing, for example, corporate-run parts of itself go to walled gardens (something I’ve heard mentioned before in this discussion), would be fine.

    Take YouTube, it is extremely entrenched to the point that when I tell some people I don’t ever actually go to YouTube[.]com, they act as if it is a life requirement I have magically shirked.

    It is not. There are other platforms. There are other media.

    If YouTube simply shut down tomorrow, the internet would live on. If it required a monthly subscription and required an account, the internet would live on. Some would give in and use it, some wouldn’t, and they would put more pressure on projects such as PeerTube to succeed.

    In all of this, the “internet” (A bunch of interconnected servers using the HTTP(S) protocol), is still alive. It just changed.

    Let’s not convince ourself that the floor will fall out from under us because you will have content that ceases to exist, or, more likely, you just have to pay.

    If it were the 80s, you could probably see similar ideas. How could tech ever be anywhere close to usable if you just used free software? Well here we are. You can. And at least for me, its damn good.