5 ms·
> Linux distributions supporting APT, like Ubuntu or Debian Oh come on guys. Don't forget Fedora. Fedora means SELinux. SELinux means you are getting the peopl
by noja 9y ago
> Linux distributions supporting APT, like Ubuntu or Debian
Oh come on guys. Don't forget Fedora. Fedora means SELinux. SELinux means you are getting the people who value security.
- daxorid 9y agoI think you underestimate the number of people whose first post-installation task is setenforce 0
- richardwhiuk 9y agoFedora doesn't support APT right? It needs to be packaged separately? So it's a whole bunch of work for a small user base.
- noja 9y agoIt's a different user base. Give us a github repo and we can build it ourself. Let me see if I can find one. Edit: https://github.com/WhisperSystems/Signal-Desktop https://github.com/WhisperSystems/Signal-Desktop
- kuschku 9y agoMoxie strictly disagrees with that, and has previously tried to shut down every third-party build of Signal, even in repos for distros or F-Droid. He only wants users to get Signal builds from himself, and no one else.
- CaptSpify 9y agoThen he shouldn't release the code.
- kuschku 9y agoI'll simply quote moxie here. On the topic of LibreSignal, a fork with the only change being that it supports notifications without relying on proprietary libraries: > I'm not OK with LibreSignal using our servers, and I'm not OK with LibreSignal using the name "Signal." You're free to use our source code for whatever you would like under the terms of the license, but you're not entitled to use our name or the service that we run. https://github.com/LibreSignal/LibreSignal/issues/37#issuecomment-217211165 https://github.com/LibreSignal/LibreSignal/issues/37#issueco... Basically, he argues that no one but him has the right to build a client that connects to his servers. Disclaimer: I personally am critical of Moxie's demands that he fully controls all released client builds, servers, and his use of analytics.
- lorenzhs 9y agoOh come on kuschku, stop it with the deliberate misinformation about Signal! You bring nonsense like this up in just about every thread on Signal and it's becoming harder and harder to assume that you operate in good faith. Moxie is most decidedly not against building the code yourself. He doesn't want anyone distributing forks or other clients using the official servers because a) that creates a giant hassle when updating the server and suddenly someone's fork doesn't work anymore and people will blame Signal, and b) if the client doesn't do what they want it to, people will blame Signal even though it's a third-party bug because it's got Signal in the name.
- kuschku 9y ago
- mrmondo 9y agoSmall user base? I think not...
- moosingin3space 9y agoIt uses `electron-builder`, which has rpm support. I don't think it would be that difficult to add in a pull request, might do it myself later. (I use Fedora, with SELinux and Wayland and all that good stuff)
- jnaulty 9y agoHere's something to work off of: https://whispersystems.discoursehosting.net/t/signal-desktop-with-non-apt-linux-distributions/1356/7?u=jnaulty https://whispersystems.discoursehosting.net/t/signal-desktop...
- eeZah7Ux 9y ago> SELinux means you are getting the people who value security Proper, very strict sandboxes implemented with seccomp & friends are much more secure. You simply block the large majority of system calls. Surprisingly, they are often easier to set up.
- noja 9y agoCan you recommend any distros that use it extensively, or is it too early?
- eeZah7Ux 9y agoIdeally upstreams, rather than distributions, should sandbox their own projects. However, Debian is shipping a number of hardened systemd unit files. To see some examples on how the sandboxing is being set up you can grep for SystemCallFilter, CapabilityBoundingSet, ProtectSystem, ProtectHome in /lib/systemd/system/*.service
- deleted 9y ago[deleted]