Yes. That’s fair. It’s an actual, realistic threat. But personally, I don’t provide any services to anyone and my data is periodically backed up to my NAS and cloud. But that’s me. I can imagine other scenarios that would definitely require SELinux.
- 0 Posts
- 49 Comments
No. I mean why wouild anyone target me? I am behind my home router most of the time, without any exposed ports. I am not saying “SELinux is unnecessary”. The post asked for my reasons to dislike.
I really don’t see how anyone can install malware on my computer. I know my way around computers enough to not do anything dumb. Of course if someone wanted, they would be able to hack my device, probably. But I am not a high value target and it would be a waste of their time and effort. In short, that’s a risk I am willing to take :)
It’s an unnecessary layer of complexity. I am the only user of my personal laptop. I don’t need fine-grained permissions. Linux users and groups are enough for any permission needs I might have, like docker group, audio and video groups, etc. I don’t have any “classified” documents on my computer. My home directory and root are on different disks. I can easily format and reinstall my system if something goes wrong and keep all my personal data.
kureta@lemmy.mlto
Selfhosted@lemmy.world•Best way to manage all my services as containers?English
3·5 months agoLooks nice but what kind of license is that?
I am also just a hobbyist, so that was a genuine question. Thanks for the answer.
Am I doing something wrong? All my services are grouped in docker compose files. Containers that have to communicate internally - a server and it’s db for example - are on their own private docker network. A reverse proxy has its ports 80 and 443 open and it is on an external docker network. Services that I need to access from the outside are on this network and they do not have any ports open. Except for the torrent client, which has a UDP port open.
We have been doing that for centuries.
kureta@lemmy.mlto
Selfhosted@lemmy.world•Best reverse proxy with ACME to run in dockerEnglish
2·7 months agoI use Zoraxy and it is great if you like GUIs.
kureta@lemmy.mlto
Selfhosted@lemmy.world•How many containers are you all running?English
3·8 months ago
kureta@lemmy.mlto
Selfhosted@lemmy.world•How many containers are you all running?English
3·8 months ago61 containers in 26 docker files.
kureta@lemmy.mlto
Linux@lemmy.ml•I just found out my fiancee wants to switch to linux, lets start a distro war, what should be her first? + other questions
13·1 year agoGNOME is great for Mac refugees. Fedora might do.
Yeah, I was so confused for a few seconds, then I realized what they are talking about.
Can you elaborate?
kureta@lemmy.mlto
Selfhosted@lemmy.world•Linkwarden v2.12 - open-source collaborative bookmark manager to collect, read, annotate, and fully preserve what matters (tons of new features!) 🚀English
1·1 year agoI was using it, switched to hoarder, then readeck. Now I’m thinking about moving back to linkwarden, so this is bad news for me.
kureta@lemmy.mlto
Selfhosted@lemmy.world•Linkwarden v2.12 - open-source collaborative bookmark manager to collect, read, annotate, and fully preserve what matters (tons of new features!) 🚀English
2·1 year agoThen, I think you should be using Archive Box. Maybe you already do.
You can mess up android by installing third party apps, using shizuku, or rooting. If there is a distro as strict as vanilla android is for the average user, then you are right. I’m talking no root, no sudo, only official flatpak apps can be installed and only user’s home directory is r/w.
Even for an intermediate user, immutable might be a good choice, but it is extra unneeded complexity for a beginner, according to my experience with those type of distro in the past.
But people are different. Some might feel right at home.
Developers, yes. Beginners, I don’t think so.
My advice would be, only use vanilla/default/official versions of the most popular distros. Ubuntu, not Ubuntu Studio, Fedora, not (I don’t know what variants there are) Fedora. Do not use specialized distros, for example a gaming distro. Do not use 3rd party repos. Do not manually install any packages from anywhere. If you want something and official repos of your official distro cannot do it, just don’t do it. Do not try to find a workaround and make it happen.
After using Linux for a while you’ll become more comfortable with it and you’ll slowly start moving outside the above limitations. The best and worst thing about Linux is that your OS is yours and you can tinker with all of its parts. But you shouldn’t, at the beginning. If you were to tinker with Windows like that, it would also break.
Iaam using Tempus, which probably is another fork, and I am really satisfied with it.