Re:SELinux is unmanageable; just turn it off if it gets in y...
by yyyk on Thursday April 28, 2022 @01:10AM
(#31188968)
Wayland fixed one problem, but there's no shortage of local privilege escalation bugs with which the calculator can still read the sudo password.
Re:SELinux is unmanageable; just turn it off if it gets in y...
by vaylian on Thursday April 28, 2022 @11:14AM
(#31193481)
I want to learn more. Do you have some examples?
Re:SELinux is unmanageable; just turn it off if it gets in y...
by yyyk on Thursday April 28, 2022 @02:04PM
(#31195945)
Just yesterday, Microsoft found a few[0]. There's no shortage of these, but more important is the haphazard way fixes are backported to longterm (e.g. [1]). This reached the point that Google's security advice is 'always follow the latest kernel'[2], except most users and distros simply cannot afford it, so they are stuck with a vulnerable system.
Linux is not unique here. In the longterm, all the typical desktop OSs will need significant structural changes far beyond 'chase vulnerabilities and patch everything all the time'.
[0] https://www.theregister.com/2022/04/27/microsoft-linux-vulne...
[1] https://nvd.nist.gov/vuln/detail/CVE-2019-15902
[2] https://security.googleblog.com/2021/08/linux-kernel-securit...
Re:SELinux is unmanageable; just turn it off if it gets in y...
by htkibar on Wednesday April 27, 2022 @01:32PM
(#31183094)
Which is still not the standard - probably will take at least a decade before we can even talk about this issue being fixed.
True with X11. Fixed in Wayland.