4 ms·

I find it sort of ironic how the operating system they use, COEN[1], instructs people to turn off SELinux to build the image correctly... [1] https://github.co

I find it sort of ironic how the operating system they use, COEN[1], instructs people to turn off SELinux to build the image correctly... [1] https://github.com/iana-org/coen https://github.com/iana-org/coen

spydum 5y ago
To be fair that's for building the image. The Image itself is debian which is irrelevant from selinux point of view. But I agree, you want your build system to be secure also. Not sure why they give this advice.
miles 5y ago
Seems like there'd be less need for SELinux on a network like theirs: "Our entire system is air-gapped, which means it is physically isolated from the outside world and has no way to connect to the internet."
- Johnny555 5y ago
  If your system is important enough to be air gapped, then it's important enough to have tight security on those air gapped computers. Air gapping is just one layer of security, it's not impossible to bridge the gap.
  - miles 5y ago
    What tangible benefits would SELinux bring to an airgapped network?
    - Johnny555 5y ago
      Why would an airgapped system face any different security threats just because the intruder came in on a USB stick, phone, malicious application, compromised hardware, etc?