4 ms·

I run thousands of severs. None of them have SELinux or systemd. It’s banned tech.

• nix23 5y ago
  Well that just says nothing, it's not a sign for security or quality nor against it. I run around 600 jails (so obviously no systemd (FreeBSD)), but the host for sure has pretty tight MAC policies (and some jails too). What other MAC-System do you use? tomoyo? apparmor?
  • pkrumins 4y ago
    I have to complement your choice of FreeBSD and jails. If I didn’t have a Linux stack, I’d run FreeBSD and jails, too. I wrote my own kernel modules that do exactly what I need in my stack and use case. No need for complicated SELinux, AppArmor or other solutions. I always roll my own solutions from the ground up (usually in a couple of all-nighters).
    • nix23 4y ago
      I needed around 5 years to slowly move away from Linux, open/-solaris/omnios/smartos was also in my mind, but...well you probably know the sad story behind it. But FreeBSD really kicks, from firewall to database all the way down, everything FreeBSD ;)
      • pkrumins 4y ago
        Yes, I know the story. But what about Illumos?
        • nix23 4y ago
          >Illumos Well illumos is just the kernel and userland (bit like BSD without ports/packets), Omnios is a really clean "server-distribution" with illumos at it's core but well same problem, not enough eye's and hand's (aka packets, documentation etc). I decided, that FreeBSD is the "more worry-free" solution for me...and still happy.
• temptemptemp111 5y ago