• 2 Posts
  • 10 Comments
Joined 4 months ago
cake
Cake day: June 30th, 2025

help-circle






  • It’s for permission management. Usually the user does not see it really.

    Basically, if a hacker gains access to something, selinux secures your system by limiting the scope the attacker can gain.

    Ubuntu uses apparmor.

    I’m not deep in both topics to judge which one is actually better. I am just used to selinux and it’s good. I remember that peoplr claimed apparmor to be easy and selinux to be difficult to handle but I can’t confirm that. For my podman containers I simply add “:Z” to the paths which the container shall have access to and I know that it can’t gain access to any other location because of this Z and selinux. If I have to debug selinux, I run sudo setenforce 0 and if it then works, I can look deeper into it.


  • I switched from fedora to silverblue to now aeon (opensuse) and I use a tumbleweed and fedora distrobox. It’s almost exactly like silverblue.

    Yes, you can choose any distro. But remember that a big part of a distro is the default software and settings. Choose one which fits your likings. I wouldn’t use debian or ubuntu. I like podman, selinux, etc. But anyone has different needs.

    Since distrobox, the base distro matters less and less.