#selinux — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #selinux, aggregated by home.social.
-
Portal:SELinux/Common issues - openSUSE Wiki https://en.opensuse.org/Portal:SELinux/Common_issues#Steam_Proton,_Bottles,_WINE,_Lutris,_not_working
-
Megjelent a Flatpak 1.18.3: biztonsági függőségek és regressziós javítások érkeztek – kezelik a CVE-2026-87766 és CVE-2026-93676 sebezhetőségeket. Gondoltad volna, hogy az 1.18.2 okozott build-regressziók SELinuxos rendszereken problémát, és téged érinthetnek? Kíváncsi vagy, javult-e a subsandbox és a bundle-telepítési stabilitás a te setupodon?
https://linuxmint.hu/hir/2026/09/megjelent-a-flatpak-1183-biztonsagi-es-regresszios-javitasokkal
#Flatpak #Bubblewrap #xdg-dbus-proxy #CVE2026 #SELinux #Linux #Runtime #FlatpakRelease #Security #Bugfix
-
Megjelent a Flatpak 1.18.3: biztonsági függőségek és regressziós javítások érkeztek – kezelik a CVE-2026-87766 és CVE-2026-93676 sebezhetőségeket. Gondoltad volna, hogy az 1.18.2 okozott build-regressziók SELinuxos rendszereken problémát, és téged érinthetnek? Kíváncsi vagy, javult-e a subsandbox és a bundle-telepítési stabilitás a te setupodon?
https://linuxmint.hu/hir/2026/09/megjelent-a-flatpak-1183-biztonsagi-es-regresszios-javitasokkal
#Flatpak #Bubblewrap #xdg-dbus-proxy #CVE2026 #SELinux #Linux #Runtime #FlatpakRelease #Security #Bugfix
-
Megjelent a Flatpak 1.18.3: biztonsági függőségek és regressziós javítások érkeztek – kezelik a CVE-2026-87766 és CVE-2026-93676 sebezhetőségeket. Gondoltad volna, hogy az 1.18.2 okozott build-regressziók SELinuxos rendszereken problémát, és téged érinthetnek? Kíváncsi vagy, javult-e a subsandbox és a bundle-telepítési stabilitás a te setupodon?
https://linuxmint.hu/hir/2026/09/megjelent-a-flatpak-1183-biztonsagi-es-regresszios-javitasokkal
#Flatpak #Bubblewrap #xdg-dbus-proxy #CVE2026 #SELinux #Linux #Runtime #FlatpakRelease #Security #Bugfix
-
Megjelent a Flatpak 1.18.3: fontos hibajavításokkal, köztük a subsandbox indítás és bundle telepítési összeomlások orvoslásával. Frissítették a Meson wrapokat (Bubblewrap, xdg-dbus-proxy) és javítottak CVE-ket — téged érinthet ez a frissítés? Frissítesz rögtön, vagy megnéznéd előbb a részleteket?
#Flatpak #Bubblewrap #xdg-dbus-proxy #Meson #CVE2026 #SELinux #sandbox #Linux #security #appdistribution #Flatpak1183
-
Megjelent a Flatpak 1.18.3: fontos hibajavításokkal, köztük a subsandbox indítás és bundle telepítési összeomlások orvoslásával. Frissítették a Meson wrapokat (Bubblewrap, xdg-dbus-proxy) és javítottak CVE-ket — téged érinthet ez a frissítés? Frissítesz rögtön, vagy megnéznéd előbb a részleteket?
#Flatpak #Bubblewrap #xdg-dbus-proxy #Meson #CVE2026 #SELinux #sandbox #Linux #security #appdistribution #Flatpak1183
-
Megjelent a Flatpak 1.18.3: fontos hibajavításokkal, köztük a subsandbox indítás és bundle telepítési összeomlások orvoslásával. Frissítették a Meson wrapokat (Bubblewrap, xdg-dbus-proxy) és javítottak CVE-ket — téged érinthet ez a frissítés? Frissítesz rögtön, vagy megnéznéd előbb a részleteket?
#Flatpak #Bubblewrap #xdg-dbus-proxy #Meson #CVE2026 #SELinux #sandbox #Linux #security #appdistribution #Flatpak1183
-
Pleasantly surprised today. Booted up a pretty old VM running openSUSE Leap 15.6, found the latest version is 16.1, was able to use the migration tool to take me there, and also found it now handles SELinux enforcing a targeted policy very similarly to RHEL-family platforms. It even has setroubleshoot. Setup wasn't much of a chore and I now have a more interesting guest than before.
-
Pleasantly surprised today. Booted up a pretty old VM running openSUSE Leap 15.6, found the latest version is 16.1, was able to use the migration tool to take me there, and also found it now handles SELinux enforcing a targeted policy very similarly to RHEL-family platforms. It even has setroubleshoot. Setup wasn't much of a chore and I now have a more interesting guest than before.
-
Pleasantly surprised today. Booted up a pretty old VM running openSUSE Leap 15.6, found the latest version is 16.1, was able to use the migration tool to take me there, and also found it now handles SELinux enforcing a targeted policy very similarly to RHEL-family platforms. It even has setroubleshoot. Setup wasn't much of a chore and I now have a more interesting guest than before.
-
Pleasantly surprised today. Booted up a pretty old VM running openSUSE Leap 15.6, found the latest version is 16.1, was able to use the migration tool to take me there, and also found it now handles SELinux enforcing a targeted policy very similarly to RHEL-family platforms. It even has setroubleshoot. Setup wasn't much of a chore and I now have a more interesting guest than before.
-
3/3 And the fair bit: what's actually changed for SMEs willing to try Linux instead. Printing and Wi-Fi driver hell are mostly solved problems now. Not an evangelist's pitch, an honest account of what's changed and what hasn't, including SELinux's default-enforcing hardening against the usual "Windows can be hardened too" line.
Full piece: https://haunted.lighthouse.co.im/articles/reinstalling-wont-fix-this/
#Windows11 #Linux #SELinux #Cybersecurity #DigitalSovereignty -
3/3 And the fair bit: what's actually changed for SMEs willing to try Linux instead. Printing and Wi-Fi driver hell are mostly solved problems now. Not an evangelist's pitch, an honest account of what's changed and what hasn't, including SELinux's default-enforcing hardening against the usual "Windows can be hardened too" line.
Full piece: https://haunted.lighthouse.co.im/articles/reinstalling-wont-fix-this/
#Windows11 #Linux #SELinux #Cybersecurity #DigitalSovereignty -
3/3 And the fair bit: what's actually changed for SMEs willing to try Linux instead. Printing and Wi-Fi driver hell are mostly solved problems now. Not an evangelist's pitch, an honest account of what's changed and what hasn't, including SELinux's default-enforcing hardening against the usual "Windows can be hardened too" line.
Full piece: https://haunted.lighthouse.co.im/articles/reinstalling-wont-fix-this/
#Windows11 #Linux #SELinux #Cybersecurity #DigitalSovereignty -
3/3 And the fair bit: what's actually changed for SMEs willing to try Linux instead. Printing and Wi-Fi driver hell are mostly solved problems now. Not an evangelist's pitch, an honest account of what's changed and what hasn't, including SELinux's default-enforcing hardening against the usual "Windows can be hardened too" line.
Full piece: https://haunted.lighthouse.co.im/articles/reinstalling-wont-fix-this/
#Windows11 #Linux #SELinux #Cybersecurity #DigitalSovereignty -
It's 2026, and I switched on SELinux on purpose.
(I did have it on on most machines, but #hetzner servers have it turned off by default)
-
It's 2026, and I switched on SELinux on purpose.
(I did have it on on most machines, but #hetzner servers have it turned off by default)
-
It's 2026, and I switched on SELinux on purpose.
(I did have it on on most machines, but #hetzner servers have it turned off by default)
-
It's 2026, and I switched on SELinux on purpose.
(I did have it on on most machines, but #hetzner servers have it turned off by default)
-
It's 2026, and I switched on SELinux on purpose.
(I did have it on on most machines, but #hetzner servers have it turned off by default)
-
SERIOUSLY WHAT THE FUCK IS THIS BULLSHIT I FUCKING HATE IT WHY IS IT SO HARD TO DISABLE UGHHHHHHHHH
-
SERIOUSLY WHAT THE FUCK IS THIS BULLSHIT I FUCKING HATE IT WHY IS IT SO HARD TO DISABLE UGHHHHHHHHH
-
SERIOUSLY WHAT THE FUCK IS THIS BULLSHIT I FUCKING HATE IT WHY IS IT SO HARD TO DISABLE UGHHHHHHHHH
-
SERIOUSLY WHAT THE FUCK IS THIS BULLSHIT I FUCKING HATE IT WHY IS IT SO HARD TO DISABLE UGHHHHHHHHH
-
I RAN THE COMMAND IT GAVE ME
STILL CAN'T RUN MY GAME
I WENT INTO THE CONFIG FILE TO DISABLE IT ENTIRELY
I STILL CAN'T RUN MY GAME
WHAT THE FUCK
-
I RAN THE COMMAND IT GAVE ME
STILL CAN'T RUN MY GAME
I WENT INTO THE CONFIG FILE TO DISABLE IT ENTIRELY
I STILL CAN'T RUN MY GAME
WHAT THE FUCK
-
I RAN THE COMMAND IT GAVE ME
STILL CAN'T RUN MY GAME
I WENT INTO THE CONFIG FILE TO DISABLE IT ENTIRELY
I STILL CAN'T RUN MY GAME
WHAT THE FUCK
-
I RAN THE COMMAND IT GAVE ME
STILL CAN'T RUN MY GAME
I WENT INTO THE CONFIG FILE TO DISABLE IT ENTIRELY
I STILL CAN'T RUN MY GAME
WHAT THE FUCK
-
I RAN THE COMMAND IT GAVE ME
STILL CAN'T RUN MY GAME
I WENT INTO THE CONFIG FILE TO DISABLE IT ENTIRELY
I STILL CAN'T RUN MY GAME
WHAT THE FUCK
-
I FUCKING HATE #SELINUX WHAT THE FUCK IS THIS STUPID BULLSHIT JUST LET ME RUN MY GAMES
-
I FUCKING HATE #SELINUX WHAT THE FUCK IS THIS STUPID BULLSHIT JUST LET ME RUN MY GAMES
-
I FUCKING HATE #SELINUX WHAT THE FUCK IS THIS STUPID BULLSHIT JUST LET ME RUN MY GAMES
-
I FUCKING HATE #SELINUX WHAT THE FUCK IS THIS STUPID BULLSHIT JUST LET ME RUN MY GAMES
-
I FUCKING HATE #SELINUX WHAT THE FUCK IS THIS STUPID BULLSHIT JUST LET ME RUN MY GAMES
-
[Перевод] Обзор релиз-команды Kubernetes v1.37: что устареет, сломается и перейдёт в GA
Команда VK Cloud подготовила перевод обзора релиз-команды Kubernetes (Arsh Sharma, Christopher Tineo, Kirti Goyal, Sophia Ugochukwu, Swathi Rao, Troy Connor) из блога kubernetes.io . О том, что устареет, сломается и перейдёт в GA в Kubernetes v1.37, релиз которого запланирован на 26 августа 2026 года. Будет полезен тем, кто эксплуатирует кластеры Kubernetes в проде: DevOps- и SRE-инженерам, платформенным командам, которые планируют обновление. По мере приближения даты релиза Kubernetes v1.37 проект развивается и взрослеет, поэтому отдельные функции признают устаревшими, удаляют или заменяют более удачными ради общего здоровья проекта. В этом блоге собраны некоторые из запланированных изменений релиза Kubernetes v1.37, о которых, по мнению релиз-команды, вам стоит знать, чтобы продолжать поддерживать вашу среду Kubernetes и оставаться в курсе последних изменений. Информация ниже отражает текущий статус релиза v1.37 и может измениться до фактической даты выхода.
https://habr.com/ru/companies/vktech/articles/1069236/
#vk_cloud #kubernetes #kubernetes_137 #релиз_kubernetes #обновление_кластера #kubelet #kubeproxy #cgroup_v2 #selinux #metrics_api
-
[Перевод] Обзор релиз-команды Kubernetes v1.37: что устареет, сломается и перейдёт в GA
Команда VK Cloud подготовила перевод обзора релиз-команды Kubernetes (Arsh Sharma, Christopher Tineo, Kirti Goyal, Sophia Ugochukwu, Swathi Rao, Troy Connor) из блога kubernetes.io . О том, что устареет, сломается и перейдёт в GA в Kubernetes v1.37, релиз которого запланирован на 26 августа 2026 года. Будет полезен тем, кто эксплуатирует кластеры Kubernetes в проде: DevOps- и SRE-инженерам, платформенным командам, которые планируют обновление. По мере приближения даты релиза Kubernetes v1.37 проект развивается и взрослеет, поэтому отдельные функции признают устаревшими, удаляют или заменяют более удачными ради общего здоровья проекта. В этом блоге собраны некоторые из запланированных изменений релиза Kubernetes v1.37, о которых, по мнению релиз-команды, вам стоит знать, чтобы продолжать поддерживать вашу среду Kubernetes и оставаться в курсе последних изменений. Информация ниже отражает текущий статус релиза v1.37 и может измениться до фактической даты выхода.
https://habr.com/ru/companies/vktech/articles/1069236/
#vk_cloud #kubernetes #kubernetes_137 #релиз_kubernetes #обновление_кластера #kubelet #kubeproxy #cgroup_v2 #selinux #metrics_api
-
[Перевод] Обзор релиз-команды Kubernetes v1.37: что устареет, сломается и перейдёт в GA
Команда VK Cloud подготовила перевод обзора релиз-команды Kubernetes (Arsh Sharma, Christopher Tineo, Kirti Goyal, Sophia Ugochukwu, Swathi Rao, Troy Connor) из блога kubernetes.io . О том, что устареет, сломается и перейдёт в GA в Kubernetes v1.37, релиз которого запланирован на 26 августа 2026 года. Будет полезен тем, кто эксплуатирует кластеры Kubernetes в проде: DevOps- и SRE-инженерам, платформенным командам, которые планируют обновление. По мере приближения даты релиза Kubernetes v1.37 проект развивается и взрослеет, поэтому отдельные функции признают устаревшими, удаляют или заменяют более удачными ради общего здоровья проекта. В этом блоге собраны некоторые из запланированных изменений релиза Kubernetes v1.37, о которых, по мнению релиз-команды, вам стоит знать, чтобы продолжать поддерживать вашу среду Kubernetes и оставаться в курсе последних изменений. Информация ниже отражает текущий статус релиза v1.37 и может измениться до фактической даты выхода.
https://habr.com/ru/companies/vktech/articles/1069236/
#vk_cloud #kubernetes #kubernetes_137 #релиз_kubernetes #обновление_кластера #kubelet #kubeproxy #cgroup_v2 #selinux #metrics_api
-
Still one of the best explanations about SELinux, that I know:
-
Still one of the best explanations about SELinux, that I know:
-
Still one of the best explanations about SELinux, that I know:
-
Still one of the best explanations about SELinux, that I know:
-
Still one of the best explanations about SELinux, that I know:
-
Affecting millions of systems, a kernel flaw discovered by Qualys could allow users to gain root privileges
https://www.linux-magazine.com/Online/News/Yet-Another-Linux-Kernel-Vulnerability-Discovered?utm_source=mlm
#Linux #kernel #Vulnerability #XFS #SELinux #Claude #exploitation -
Affecting millions of systems, a kernel flaw discovered by Qualys could allow users to gain root privileges
https://www.linux-magazine.com/Online/News/Yet-Another-Linux-Kernel-Vulnerability-Discovered?utm_source=mlm
#Linux #kernel #Vulnerability #XFS #SELinux #Claude #exploitation -
Affecting millions of systems, a kernel flaw discovered by Qualys could allow users to gain root privileges
https://www.linux-magazine.com/Online/News/Yet-Another-Linux-Kernel-Vulnerability-Discovered?utm_source=mlm
#Linux #kernel #Vulnerability #XFS #SELinux #Claude #exploitation -
Affecting millions of systems, a kernel flaw discovered by Qualys could allow users to gain root privileges
https://www.linux-magazine.com/Online/News/Yet-Another-Linux-Kernel-Vulnerability-Discovered?utm_source=mlm
#Linux #kernel #Vulnerability #XFS #SELinux #Claude #exploitation -
Affecting millions of systems, a kernel flaw discovered by Qualys could allow users to gain root privileges
https://www.linux-magazine.com/Online/News/Yet-Another-Linux-Kernel-Vulnerability-Discovered?utm_source=mlm
#Linux #kernel #Vulnerability #XFS #SELinux #Claude #exploitation -
Installed FedoraIOT baremetal, just to kick the tyres an with immutable/atomic before I try it on something like my daily driver.
Man, #fedoraatomic doesn't suffer this fool. Not sure if it's #podman , #systemd or #selinux but what usually takes a few minutes with docker has me stuck on a hamsterwheel trying to figure out what I fucked up.
Also, vi is the default editor? I feel like I'm in an alternate reality where #Fedora kinda sucks. I must've installed nano so long ago I don't remember
-
Installed FedoraIOT baremetal, just to kick the tyres an with immutable/atomic before I try it on something like my daily driver.
Man, #fedoraatomic doesn't suffer this fool. Not sure if it's #podman , #systemd or #selinux but what usually takes a few minutes with docker has me stuck on a hamsterwheel trying to figure out what I fucked up.
Also, vi is the default editor? I feel like I'm in an alternate reality where #Fedora kinda sucks. I must've installed nano so long ago I don't remember
-
Installed FedoraIOT baremetal, just to kick the tyres an with immutable/atomic before I try it on something like my daily driver.
Man, #fedoraatomic doesn't suffer this fool. Not sure if it's #podman , #systemd or #selinux but what usually takes a few minutes with docker has me stuck on a hamsterwheel trying to figure out what I fucked up.
Also, vi is the default editor? I feel like I'm in an alternate reality where #Fedora kinda sucks. I must've installed nano so long ago I don't remember
-
Installed FedoraIOT baremetal, just to kick the tyres an with immutable/atomic before I try it on something like my daily driver.
Man, #fedoraatomic doesn't suffer this fool. Not sure if it's #podman , #systemd or #selinux but what usually takes a few minutes with docker has me stuck on a hamsterwheel trying to figure out what I fucked up.
Also, vi is the default editor? I feel like I'm in an alternate reality where #Fedora kinda sucks. I must've installed nano so long ago I don't remember
-
@junebug FWIW, I've been using Linux as my primary OS for well over 20 years. (Setting up a printer used to suuuuuck!) And every now and then there's a "something" that doesn't quite work. (After an upgrade, it's almost always #SELinux.)
However, the last couple of headscratchers had me turn to #ClaudeCode and damn if everything isn't working blindingly well now.
Those obscure thingees ain't so obscure for the #SchocasticParrot.
-
@junebug FWIW, I've been using Linux as my primary OS for well over 20 years. (Setting up a printer used to suuuuuck!) And every now and then there's a "something" that doesn't quite work. (After an upgrade, it's almost always #SELinux.)
However, the last couple of headscratchers had me turn to #ClaudeCode and damn if everything isn't working blindingly well now.
Those obscure thingees ain't so obscure for the #SchocasticParrot.
-
@junebug FWIW, I've been using Linux as my primary OS for well over 20 years. (Setting up a printer used to suuuuuck!) And every now and then there's a "something" that doesn't quite work. (After an upgrade, it's almost always #SELinux.)
However, the last couple of headscratchers had me turn to #ClaudeCode and damn if everything isn't working blindingly well now.
Those obscure thingees ain't so obscure for the #SchocasticParrot.
-
@junebug FWIW, I've been using Linux as my primary OS for well over 20 years. (Setting up a printer used to suuuuuck!) And every now and then there's a "something" that doesn't quite work. (After an upgrade, it's almost always #SELinux.)
However, the last couple of headscratchers had me turn to #ClaudeCode and damn if everything isn't working blindingly well now.
Those obscure thingees ain't so obscure for the #SchocasticParrot.
-
Nur 2 von 100 #Linux-Distributionen sind tatsächlich sicher vorkonfiguriert: #Fedora und #openSUSE. In diesem Video (Englisch) wird es genauer erklärt.
-
Nur 2 von 100 #Linux-Distributionen sind tatsächlich sicher vorkonfiguriert: #Fedora und #openSUSE. In diesem Video (Englisch) wird es genauer erklärt.
