I've been using Linux Mint since forever. I've never felt a reason to change. But I'm interested in what persuaded others to move.

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 2 years ago (2 children)

The problem with SELinux is that everyone rushed to push it out, alongside packages affected by it without support for it. So it was a crapshoot whether or not you'd have something working each time. That is better now, but was initially a colossal pain in the ass for about five years or so.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 2 years ago (1 child)

    What put me off selinux is that the officially documented way of generating a new policy is to run a service unconfined, and then generating the policy from its behaviour. This is backwards on so many levels... In contrast policy-based admission control in kubernetes is a delight to use, and creating new policies is actually doable outside of a lab.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 2 years ago

    You could preemptively write the policy if you know the context and policies you want to apply. I just don’t think it’s worth the time when you can generate a policy with two commands.

  • source
  • parent