104
SELinux and confined users, make the Linux Desktop more secure (discussion.fedoraproject.org)
submitted 2 years ago by to c/linux@lemmy.ml
33 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 2 years ago* (1 child)

yeah, same. I am currently on NixOS, but looking to move away because it's lacking support any MAC. I really love NixOS and it's declarative approach to things, but i can't live with such a large security hole in my home Network.

As soon as i find a Distro that has MAC and allows for at least semi-declarative configuration, i am switching. But being able to declare an env/dconf setting in my config and sync it across all devices is just too powerful

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 2 years ago (1 child)

    I suggest you check Silverblue + Ansible (or CoreOS/IoT for server stuff).

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago*

    while i think that ansible is really cool, it's not the same as Nix.

    correct me if i'm wrong, but afaik Ansible just modifies the current state of the System with a declarative configuration.

    Nix reverts your system back to install and then applies the configuration. The result is that in Nix if i remove something from the configuration.nix it is as if it never existed, whereas on Ansible it stays unless i manually run a task to uninstall it.

  • permalink
  • fedilink
  • source
  • parent