3 ms·
Do you really need something like SELinux if the “only thing running” is a network service that doesn’t have access to a file system? Even if that service was c
by mbreese 7y ago
Do you really need something like SELinux if the “only thing running” is a network service that doesn’t have access to a file system? Even if that service was compromised, what else could be gained? Especially if the unikernel doesn’t spawn other processes.
Am I missing something obvious?
- ncmncm 7y agoNo, not missing anything. Trendiness wars with actual benefit.
- nintendo1889 7y ago"the computer industry is more fashionable than the women's fashion industry" - Stallman
- x0054 7y agoNope, you are right on the money. It’s just new and different, and people don’t like new and different.
- eyberg 7y agoNot being able to spawn other processes is actually a huge security and performance benefit when you know you're deploying to a virtualized environment to begin with. (eg: cloud).