Desktop Linux Hardening (2022)
Linux security is surprisingly weak, and a mess.<p>Are users expected to search for hardening guides, spend time learn all these pieces and implement them securely? Even the system administrators may not know tools such as SeLinux, let alone the end users. It takes a lot of time to learn write SeLinux or AppArmor policies.<p>We need an operating system that is already hardened, preconfigured with secure defaults, and can be a daily driver. It should not need the user “harden” it.<p>I don’t mean OpenBSD: it’s secure because it doesn’t enable much.