Silver's Home
  • Communities
  • Create Post
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
@joojmachine@lemmy.ml to Linux@lemmy.ml • 1 year ago

Fedora 40 Change Proposal: Systemd Security Hardening

discussion.fedoraproject.org

external-link
message-square
11
fedilink
111
external-link

Fedora 40 Change Proposal: Systemd Security Hardening

discussion.fedoraproject.org

@joojmachine@lemmy.ml to Linux@lemmy.ml • 1 year ago
message-square
11
fedilink
F40 Change Proposal: Systemd Security Hardening (System-Wide)
discussion.fedoraproject.org
external-link
Enable systemd service hardening features for default system services This is a proposed Change for Fedora Linux. This document represents a proposed Change. As part of the Changes process, proposals are publicly announced in order to receive community feedback. This proposal will only be implemented if approved by the Fedora Engineering Steering Committee. Wiki Announced This is a proposed Change for Fedora Linux. This document represents a proposed Change. As part of the Changes process, ...
alert-triangle
You must log in or register to comment.
  • 30021190
    link
    fedilink
    42•1 year ago

    For the most part, this seems a fairly sane proposal.

    • @Luci@lemmy.ca
      link
      fedilink
      39•1 year ago

      Yep, it hardens the system and barely affects the user. Nothing but win here.

      • @joojmachine@lemmy.mlOP
        link
        fedilink
        20•1 year ago

        another extremely common fedora W

        • @terminhell@lemmy.dbzer0.com
          link
          fedilink
          6•1 year ago

          Yup. While not perfect, it’s my preferred distro now. Well, has been for a few years now.

    • @bl_r@beehaw.org
      link
      fedilink
      7•1 year ago

      It can also be used to manually harden fedora 39, which I think is great as well!

  • @lightnegative@lemmy.world
    link
    fedilink
    4•1 year ago

    Damn security guys are trying to justify their existence again.

    My Fedora is single user and the system handily comes with one called ‘root’

    • @IAm_A_Complete_Idiot@sh.itjust.works
      link
      fedilink
      2•
      edit-2
      1 year ago

      This is good for precisely the single user case - potentially malicious services on your system can’t view things they otherwise would be able to, or access resources they don’t need. Even if it’s under the same user.

    • @maryjayjay@lemmy.world
      link
      fedilink
      1•
      edit-2
      1 year ago

      Can’t tell whether you are joking or not

Linux@lemmy.ml

!linux@lemmy.ml

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !linux@lemmy.ml

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

  • Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
  • No misinformation
  • No NSFW content
  • No hate speech, bigotry, etc

Related Communities

  • !opensource@lemmy.ml
  • !libre_culture@lemmy.ml
  • !technology@lemmy.ml
  • !libre_hardware@lemmy.ml

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

  • 961 users / day
  • 3.62K users / week
  • 8.4K users / month
  • 17.7K users / 6 months
  • 54.2K subscribers
  • 7.29K Posts
  • 185K Comments
  • Modlog
  • mods:
  • @AgreeableLandscape@lemmy.ml
  • @nooter692@lemmy.ml
  • @MarcellusDrum@lemmy.ml
  • Arthur Besse
  • Cyclohexane
  • @d3Xt3r@lemmy.nz
  • BE: 0.19.3
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org