2 ms·
This is how linux systems are used, when an higher level of security is needed. The security levels look like this(lowest to highest): Standard installation >
by stop50 2y ago
This is how linux systems are used, when an higher level of security is needed.
The security levels look like this(lowest to highest):
Standard installation > AppArmor > Selinux > selinux with default-deny(everything not explicitly allowed is denied)
- stop50 2y agoWindows has an built in method, but make backups, since you can deny yourself access to critical things.
- elmerfud 2y agoThere's also fapolicyd as well, but the problem is these rule sets are often updated automatically by the package installation manager such as RPM. So while this can stop rogue binaries from running in unapproved locations anyone who has access to the box to install a rogue binary and have it run at elevated permissions would be able to install a package with the package manager. Most of the default rule sets trust things that are installed with the package manager in order to make the operating system usable.