Linux being secure is a common misconception

Re:Linux being secure is a common misconception by yesco on Sunday November 26, 2023 @02:17PM (#38424109)

> It goes on and on. You should read the OP; it is really quite informative.

I'm going to let this pass since I don't want to start a flamewar here but I think it's very rude to imply I didn't read the OP, and I think less of you for it.

So to summarize, you believe ChromeOS is immune to the Kernel's security vulnerabilities outlined in the OP because:

- it uses sandboxing (unrelated to kernel security) - disabled io_uring - it uses SELinux (unrelated to kernel security) which other distros do as well but you believe ChromeOS does it more effectively for desktop applications

I remain unconvinced.

[ Parent | on HN ]

Re:Linux being secure is a common misconception by nolist_policy on Sunday November 26, 2023 @02:33PM (#38424250)

ChromeOS' root filesystem is read-only with tamper-proof authentication. And notably, there is no way to autostart anything.

So in the worst case where an attacker gains code execution in the kernel, you just reboot the device and are guaranteed to be safe again.

[ Parent | on HN ]