4 ms·
Another problem with Yunohost at least is that is has no focus at all on security. There are other, like Sandstorm, that at least try to have some basic securit
by macrolime 4y ago
Another problem with Yunohost at least is that is has no focus at all on security. There are other, like Sandstorm, that at least try to have some basic security.
- zufallsheld 4y agoCan you expand on that a bit? I don't think its true. Yunohost has a firewall, fail2ban, user management, access management for its installed apps and documentation on the topic: https://yunohost.org/en/security https://yunohost.org/en/security
- chme 4y agoI am not the poster, but the comparison with sandstorm leads me to believe that they meant sercurity as in service isolation, e.g. running potentially unstrusted services in one system. IIUC yunohost correctly they help to deploy and manage services in a more traditional way and assume that each service is trusted and they aren't that rigerously isolated from each other.
- macrolime 4y agoYes, that's what I was referring to. With Yunohost if a single service is compromised, then they're all compromised. That makes for a large attack surface that grows with each app you install.
- zufallsheld 4y agoThat's not entirely true. Every service runfs as it's own user with (mostly) only access to it's own data.
- macrolime 4y agoThat was best practices in the 2000s. Today best practice is using the zero trust security model and sandboxing everything.
- j45 4y agoYou might be surprised by proxmox with turnkey Linux images, or rockylinux containers