News for hackers. Stuff that matters.

A comment on Dear Linux, Privileged Ports Must Die. Parent comment

Re:Dear Linux, Privileged Ports Must Die by foldr on Thursday September 01, 2022 @11:29AM (#32677802)
People who "don't know what they're doing" will just disable SELinux if it's too difficult to configure the policy that they want. It's better to make security policies easy to configure correctly so that more people do it correctly.

Also, what does "third party" really mean in this context? I am neither the author of the Linux distro that I'm using nor the web server that I want to use. It's all third party software from my point of view.

[ Parent | on HN ]
Re:Dear Linux, Privileged Ports Must Die by ehutch79 on Wednesday September 07, 2022 @10:44AM (#32751313)
You need some level of expertise to turn off selinux, or even know what it is. They know what they're doing enough to know the consequences if they can turn it off.

By third party, i mean stuff not in the distro. It's extra effort to install something else. You're likely to have at least a link to docs in your face when you went and got the binaries.

[ Parent | on HN ]