3 ms·
Any references to how you use selinux? I've used bwrap and firejail, but I don't feel confident that I'm not leaving holes open?
by internet_points 11mo ago
Any references to how you use selinux? I've used bwrap and firejail, but I don't feel confident that I'm not leaving holes open?
- viraptor 11mo agoHonestly - no. To use selinux you need to commit to actually learning how it works and experimenting a bit. I don't think there's an easier way than reading both redhat (https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/using_selinux/getting-started-with-selinux_using-selinux https://docs.redhat.com/en/documentation/red_hat_enterprise_...) and NSA (https://www.nsa.gov/portals/75/documents/resources/everyone/digital-media-center/publications/research-papers/configuring-selinux-policy-report.pdf https://www.nsa.gov/portals/75/documents/resources/everyone/...) docs. If you're happy with firejail, make sure you use whitelists only and you'll be 90% there with what's possible to achieve.