this post was submitted on 08 Aug 2025
72 points (86.7% liked)
Linux
8908 readers
475 users here now
A community for everything relating to the GNU/Linux operating system (except the memes!)
Also, check out:
Original icon base courtesy of lewing@isc.tamu.edu and The GIMP
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
/etc/selinux/config
which is really quite complicated for "normal" users.I think those are the main things. I think it would also help if KDE were the "default" desktop environment instead of Gnome. It's much better, with one caveat - they seem incapable of good visual design! Don't get me wrong, it's a lot better than when KDE 5 first came out, but there are still very obvious spacing issues, and Gnome never has those.
If you ever need to disable SELinux, your software distribution is trash, or you bought some unsupported piece of hardware with crap Linux drivers. Or you are writing kernel drivers and it's your test machine.
What the user really needs is to launch an app in a secure sandbox with two mouse clicks, not an easier way to edit SELinux rules. Linux software distributions focus too much on technology, but don't provide the finished user-facing solution with this technology, that's the problem #4.
You should NOT disable SELinux. Where in the hell did you get the idea it’s a good idea for people to do? Quite the opposite, people should have ways to interact with the MAC system easily.
You should read this before jumping to "it's more security therefore it's better" conclusions:
https://www.ctrl.blog/entry/selinux-unmanageable.html