News for hackers. Stuff that matters.

A comment on macOS Containers v0.0.1. Parent comment

Re:macOS Containers v0.0.1 by totallywrong on Tuesday September 26, 2023 @11:57AM (#37661240)
> I don't think OS becomes any less vulnerable than usual Linux/Windows installation.

A modern Linux with SELinux enabled (the default in e.g. Fedora) running apps inside rootless containers (Podman doesn’t even need a daemon) is likely much more secure than your default MacOS or Windows.

[ Parent | on HN ]
Re:macOS Containers v0.0.1 by brabel on Tuesday September 26, 2023 @12:06PM (#37661396)
I think you're probably @totallywrong
[ Parent | on HN ]
Re:macOS Containers v0.0.1 by totallywrong on Tuesday September 26, 2023 @01:47PM (#37663066)
Well Linux powers just about all the most important systems in the world and SELinux was originally developed by the NSA, but I'd love to get your insights.
[ Parent | on HN ]
Re:macOS Containers v0.0.1 by anthk on Tuesday September 26, 2023 @02:42PM (#37663931)
TBH, Fedora Silverblue with the parent commenter's approach it's far more secure.
[ Parent | on HN ]
Re:macOS Containers v0.0.1 by fkgmeqnb on Wednesday September 27, 2023 @02:01PM (#37678586)
If you're talking about desktop use, not really. All the software in a default Fedora desktop install, runs as unconfined by SELinux policies.

Where SELinux really shines is in server installs.

[ Parent | on HN ]