Re:Initial support for guided disk encryption in OpenBSD ins...
by ori_b on Friday March 10, 2023 @09:07PM
(#35104364)
> It doesn't do a fucking thing to lock down Oracle you absolute twit. Oracle won't even start if you try to limit it as though it were Chrome.
Yeah, change the fucking #define I hardcoded for simplicity to match what Oracle needs. You'd probably want to remove the stuff that allows it to do graphics. Or make the config a command line argument.
For comparison, can you show me the SELinux policy that you would write to lock down Oracle, or Chrome, or Firefox, or some other complex third party piece of software with multiple processes and threads with different roles?
Yeah, change the fucking #define I hardcoded for simplicity to match what Oracle needs. You'd probably want to remove the stuff that allows it to do graphics. Or make the config a command line argument.
For comparison, can you show me the SELinux policy that you would write to lock down Oracle, or Chrome, or Firefox, or some other complex third party piece of software with multiple processes and threads with different roles?