Re:Lima: Linux-on-Mac
by mixmastamyk on Friday May 14, 2021 @02:03PM
(#27157564)
You can’t stop dozens of chatty network services, due to a read only system partition. Without defeating other security that is. That’s a poor design.
[ Parent
| on HN ]
Re:Lima: Linux-on-Mac
by gjsman-1000 on Friday May 14, 2021 @02:09PM
(#27157652)
Umm... yes, you can. You can use Little Snitch just fine.
Re:Lima: Linux-on-Mac
by mixmastamyk on Friday May 14, 2021 @10:55PM
(#27161896)
That’s a band aid, rather than the proper solution of not having them on by default.
Poor design is leveraging a security model on an arbitrary and centralized root of trust, but maybe it's just a matter of perspective.
Yes, that is a poor design - no sarcasm - I mean it.
However it’s better for most people than the alternative.
Fixing this should be job #1 for the Linux community.
For the most part, Linux has "fixed" that. Really, the hardest part of using Linux is the onboarding process, which is being addressed with companies like System76 and Lenovo offering to ship laptops with Linux preinstalled.
As far as I am aware Linux hasn’t even started to work on the problem: