home.social

#selinux — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #selinux, aggregated by home.social.

fetched live
  1. Megjelent a Flatpak 1.18.3: biztonsági függőségek és regressziós javítások érkeztek – kezelik a CVE-2026-87766 és CVE-2026-93676 sebezhetőségeket. Gondoltad volna, hogy az 1.18.2 okozott build-regressziók SELinuxos rendszereken problémát, és téged érinthetnek? Kíváncsi vagy, javult-e a subsandbox és a bundle-telepítési stabilitás a te setupodon?

    linuxmint.hu/hir/2026/09/megje

    #Flatpak #Bubblewrap #xdg-dbus-proxy #CVE2026 #SELinux #Linux #Runtime #FlatpakRelease #Security #Bugfix

  2. Megjelent a Flatpak 1.18.3: biztonsági függőségek és regressziós javítások érkeztek – kezelik a CVE-2026-87766 és CVE-2026-93676 sebezhetőségeket. Gondoltad volna, hogy az 1.18.2 okozott build-regressziók SELinuxos rendszereken problémát, és téged érinthetnek? Kíváncsi vagy, javult-e a subsandbox és a bundle-telepítési stabilitás a te setupodon?

    linuxmint.hu/hir/2026/09/megje

    #Flatpak #Bubblewrap #xdg-dbus-proxy #CVE2026 #SELinux #Linux #Runtime #FlatpakRelease #Security #Bugfix

  3. Megjelent a Flatpak 1.18.3: biztonsági függőségek és regressziós javítások érkeztek – kezelik a CVE-2026-87766 és CVE-2026-93676 sebezhetőségeket. Gondoltad volna, hogy az 1.18.2 okozott build-regressziók SELinuxos rendszereken problémát, és téged érinthetnek? Kíváncsi vagy, javult-e a subsandbox és a bundle-telepítési stabilitás a te setupodon?

    linuxmint.hu/hir/2026/09/megje

    #Flatpak #Bubblewrap #xdg-dbus-proxy #CVE2026 #SELinux #Linux #Runtime #FlatpakRelease #Security #Bugfix

  4. Megjelent a Flatpak 1.18.3: fontos hibajavításokkal, köztük a subsandbox indítás és bundle telepítési összeomlások orvoslásával. Frissítették a Meson wrapokat (Bubblewrap, xdg-dbus-proxy) és javítottak CVE-ket — téged érinthet ez a frissítés? Frissítesz rögtön, vagy megnéznéd előbb a részleteket?

    linuxmint.hu/hir/2026/09/megje

    #Flatpak #Bubblewrap #xdg-dbus-proxy #Meson #CVE2026 #SELinux #sandbox #Linux #security #appdistribution #Flatpak1183

  5. Megjelent a Flatpak 1.18.3: fontos hibajavításokkal, köztük a subsandbox indítás és bundle telepítési összeomlások orvoslásával. Frissítették a Meson wrapokat (Bubblewrap, xdg-dbus-proxy) és javítottak CVE-ket — téged érinthet ez a frissítés? Frissítesz rögtön, vagy megnéznéd előbb a részleteket?

    linuxmint.hu/hir/2026/09/megje

    #Flatpak #Bubblewrap #xdg-dbus-proxy #Meson #CVE2026 #SELinux #sandbox #Linux #security #appdistribution #Flatpak1183

  6. Megjelent a Flatpak 1.18.3: fontos hibajavításokkal, köztük a subsandbox indítás és bundle telepítési összeomlások orvoslásával. Frissítették a Meson wrapokat (Bubblewrap, xdg-dbus-proxy) és javítottak CVE-ket — téged érinthet ez a frissítés? Frissítesz rögtön, vagy megnéznéd előbb a részleteket?

    linuxmint.hu/hir/2026/09/megje

    #Flatpak #Bubblewrap #xdg-dbus-proxy #Meson #CVE2026 #SELinux #sandbox #Linux #security #appdistribution #Flatpak1183

  7. Pleasantly surprised today. Booted up a pretty old VM running openSUSE Leap 15.6, found the latest version is 16.1, was able to use the migration tool to take me there, and also found it now handles SELinux enforcing a targeted policy very similarly to RHEL-family platforms. It even has setroubleshoot. Setup wasn't much of a chore and I now have a more interesting guest than before.

  8. Pleasantly surprised today. Booted up a pretty old VM running openSUSE Leap 15.6, found the latest version is 16.1, was able to use the migration tool to take me there, and also found it now handles SELinux enforcing a targeted policy very similarly to RHEL-family platforms. It even has setroubleshoot. Setup wasn't much of a chore and I now have a more interesting guest than before.

    #SELinux #OpenSUSE16

  9. Pleasantly surprised today. Booted up a pretty old VM running openSUSE Leap 15.6, found the latest version is 16.1, was able to use the migration tool to take me there, and also found it now handles SELinux enforcing a targeted policy very similarly to RHEL-family platforms. It even has setroubleshoot. Setup wasn't much of a chore and I now have a more interesting guest than before.

    #SELinux #OpenSUSE16

  10. Pleasantly surprised today. Booted up a pretty old VM running openSUSE Leap 15.6, found the latest version is 16.1, was able to use the migration tool to take me there, and also found it now handles SELinux enforcing a targeted policy very similarly to RHEL-family platforms. It even has setroubleshoot. Setup wasn't much of a chore and I now have a more interesting guest than before.

    #SELinux #OpenSUSE16

  11. 3/3 And the fair bit: what's actually changed for SMEs willing to try Linux instead. Printing and Wi-Fi driver hell are mostly solved problems now. Not an evangelist's pitch, an honest account of what's changed and what hasn't, including SELinux's default-enforcing hardening against the usual "Windows can be hardened too" line.
    Full piece: haunted.lighthouse.co.im/artic
    #Windows11 #Linux #SELinux #Cybersecurity #DigitalSovereignty

  12. 3/3 And the fair bit: what's actually changed for SMEs willing to try Linux instead. Printing and Wi-Fi driver hell are mostly solved problems now. Not an evangelist's pitch, an honest account of what's changed and what hasn't, including SELinux's default-enforcing hardening against the usual "Windows can be hardened too" line.
    Full piece: haunted.lighthouse.co.im/artic
    #Windows11 #Linux #SELinux #Cybersecurity #DigitalSovereignty

  13. 3/3 And the fair bit: what's actually changed for SMEs willing to try Linux instead. Printing and Wi-Fi driver hell are mostly solved problems now. Not an evangelist's pitch, an honest account of what's changed and what hasn't, including SELinux's default-enforcing hardening against the usual "Windows can be hardened too" line.
    Full piece: haunted.lighthouse.co.im/artic
    #Windows11 #Linux #SELinux #Cybersecurity #DigitalSovereignty

  14. 3/3 And the fair bit: what's actually changed for SMEs willing to try Linux instead. Printing and Wi-Fi driver hell are mostly solved problems now. Not an evangelist's pitch, an honest account of what's changed and what hasn't, including SELinux's default-enforcing hardening against the usual "Windows can be hardened too" line.
    Full piece: haunted.lighthouse.co.im/artic
    #Windows11 #Linux #SELinux #Cybersecurity #DigitalSovereignty

  15. It's 2026, and I switched on SELinux on purpose.

    (I did have it on on most machines, but #hetzner servers have it turned off by default)

    #fedora #selinux

  16. It's 2026, and I switched on SELinux on purpose.

    (I did have it on on most machines, but #hetzner servers have it turned off by default)

    #fedora #selinux

  17. It's 2026, and I switched on SELinux on purpose.

    (I did have it on on most machines, but #hetzner servers have it turned off by default)

    #fedora #selinux

  18. It's 2026, and I switched on SELinux on purpose.

    (I did have it on on most machines, but #hetzner servers have it turned off by default)

    #fedora #selinux

  19. It's 2026, and I switched on SELinux on purpose.

    (I did have it on on most machines, but #hetzner servers have it turned off by default)

    #fedora #selinux

  20. SERIOUSLY WHAT THE FUCK IS THIS BULLSHIT I FUCKING HATE IT WHY IS IT SO HARD TO DISABLE UGHHHHHHHHH

    #REDHAT #FEDORA #SELINUX #LINUX

  21. SERIOUSLY WHAT THE FUCK IS THIS BULLSHIT I FUCKING HATE IT WHY IS IT SO HARD TO DISABLE UGHHHHHHHHH

    #REDHAT #FEDORA #SELINUX #LINUX

  22. SERIOUSLY WHAT THE FUCK IS THIS BULLSHIT I FUCKING HATE IT WHY IS IT SO HARD TO DISABLE UGHHHHHHHHH

    #REDHAT #FEDORA #SELINUX #LINUX

  23. SERIOUSLY WHAT THE FUCK IS THIS BULLSHIT I FUCKING HATE IT WHY IS IT SO HARD TO DISABLE UGHHHHHHHHH

    #REDHAT #FEDORA #SELINUX #LINUX

  24. I RAN THE COMMAND IT GAVE ME

    STILL CAN'T RUN MY GAME

    I WENT INTO THE CONFIG FILE TO DISABLE IT ENTIRELY

    I STILL CAN'T RUN MY GAME

    WHAT THE FUCK

    #SELINUX

  25. I RAN THE COMMAND IT GAVE ME

    STILL CAN'T RUN MY GAME

    I WENT INTO THE CONFIG FILE TO DISABLE IT ENTIRELY

    I STILL CAN'T RUN MY GAME

    WHAT THE FUCK

    #SELINUX

  26. I RAN THE COMMAND IT GAVE ME

    STILL CAN'T RUN MY GAME

    I WENT INTO THE CONFIG FILE TO DISABLE IT ENTIRELY

    I STILL CAN'T RUN MY GAME

    WHAT THE FUCK

    #SELINUX

  27. I RAN THE COMMAND IT GAVE ME

    STILL CAN'T RUN MY GAME

    I WENT INTO THE CONFIG FILE TO DISABLE IT ENTIRELY

    I STILL CAN'T RUN MY GAME

    WHAT THE FUCK

    #SELINUX

  28. I RAN THE COMMAND IT GAVE ME

    STILL CAN'T RUN MY GAME

    I WENT INTO THE CONFIG FILE TO DISABLE IT ENTIRELY

    I STILL CAN'T RUN MY GAME

    WHAT THE FUCK

    #SELINUX

  29. I FUCKING HATE #SELINUX WHAT THE FUCK IS THIS STUPID BULLSHIT JUST LET ME RUN MY GAMES

  30. I FUCKING HATE #SELINUX WHAT THE FUCK IS THIS STUPID BULLSHIT JUST LET ME RUN MY GAMES

  31. I FUCKING HATE #SELINUX WHAT THE FUCK IS THIS STUPID BULLSHIT JUST LET ME RUN MY GAMES

  32. I FUCKING HATE #SELINUX WHAT THE FUCK IS THIS STUPID BULLSHIT JUST LET ME RUN MY GAMES

  33. I FUCKING HATE #SELINUX WHAT THE FUCK IS THIS STUPID BULLSHIT JUST LET ME RUN MY GAMES

  34. [Перевод] Обзор релиз-команды Kubernetes v1.37: что устареет, сломается и перейдёт в GA

    Команда VK Cloud подготовила перевод обзора релиз-команды Kubernetes (Arsh Sharma, Christopher Tineo, Kirti Goyal, Sophia Ugochukwu, Swathi Rao, Troy Connor) из блога kubernetes.io . О том, что устареет, сломается и перейдёт в GA в Kubernetes v1.37, релиз которого запланирован на 26 августа 2026 года. Будет полезен тем, кто эксплуатирует кластеры Kubernetes в проде: DevOps- и SRE-инженерам, платформенным командам, которые планируют обновление. По мере приближения даты релиза Kubernetes v1.37 проект развивается и взрослеет, поэтому отдельные функции признают устаревшими, удаляют или заменяют более удачными ради общего здоровья проекта. В этом блоге собраны некоторые из запланированных изменений релиза Kubernetes v1.37, о которых, по мнению релиз-команды, вам стоит знать, чтобы продолжать поддерживать вашу среду Kubernetes и оставаться в курсе последних изменений. Информация ниже отражает текущий статус релиза v1.37 и может измениться до фактической даты выхода.

    habr.com/ru/companies/vktech/a

    #vk_cloud #kubernetes #kubernetes_137 #релиз_kubernetes #обновление_кластера #kubelet #kubeproxy #cgroup_v2 #selinux #metrics_api

  35. [Перевод] Обзор релиз-команды Kubernetes v1.37: что устареет, сломается и перейдёт в GA

    Команда VK Cloud подготовила перевод обзора релиз-команды Kubernetes (Arsh Sharma, Christopher Tineo, Kirti Goyal, Sophia Ugochukwu, Swathi Rao, Troy Connor) из блога kubernetes.io . О том, что устареет, сломается и перейдёт в GA в Kubernetes v1.37, релиз которого запланирован на 26 августа 2026 года. Будет полезен тем, кто эксплуатирует кластеры Kubernetes в проде: DevOps- и SRE-инженерам, платформенным командам, которые планируют обновление. По мере приближения даты релиза Kubernetes v1.37 проект развивается и взрослеет, поэтому отдельные функции признают устаревшими, удаляют или заменяют более удачными ради общего здоровья проекта. В этом блоге собраны некоторые из запланированных изменений релиза Kubernetes v1.37, о которых, по мнению релиз-команды, вам стоит знать, чтобы продолжать поддерживать вашу среду Kubernetes и оставаться в курсе последних изменений. Информация ниже отражает текущий статус релиза v1.37 и может измениться до фактической даты выхода.

    habr.com/ru/companies/vktech/a

    #vk_cloud #kubernetes #kubernetes_137 #релиз_kubernetes #обновление_кластера #kubelet #kubeproxy #cgroup_v2 #selinux #metrics_api

  36. [Перевод] Обзор релиз-команды Kubernetes v1.37: что устареет, сломается и перейдёт в GA

    Команда VK Cloud подготовила перевод обзора релиз-команды Kubernetes (Arsh Sharma, Christopher Tineo, Kirti Goyal, Sophia Ugochukwu, Swathi Rao, Troy Connor) из блога kubernetes.io . О том, что устареет, сломается и перейдёт в GA в Kubernetes v1.37, релиз которого запланирован на 26 августа 2026 года. Будет полезен тем, кто эксплуатирует кластеры Kubernetes в проде: DevOps- и SRE-инженерам, платформенным командам, которые планируют обновление. По мере приближения даты релиза Kubernetes v1.37 проект развивается и взрослеет, поэтому отдельные функции признают устаревшими, удаляют или заменяют более удачными ради общего здоровья проекта. В этом блоге собраны некоторые из запланированных изменений релиза Kubernetes v1.37, о которых, по мнению релиз-команды, вам стоит знать, чтобы продолжать поддерживать вашу среду Kubernetes и оставаться в курсе последних изменений. Информация ниже отражает текущий статус релиза v1.37 и может измениться до фактической даты выхода.

    habr.com/ru/companies/vktech/a

    #vk_cloud #kubernetes #kubernetes_137 #релиз_kubernetes #обновление_кластера #kubelet #kubeproxy #cgroup_v2 #selinux #metrics_api

  37. Installed FedoraIOT baremetal, just to kick the tyres an with immutable/atomic before I try it on something like my daily driver.

    Man, #fedoraatomic doesn't suffer this fool. Not sure if it's #podman , #systemd or #selinux but what usually takes a few minutes with docker has me stuck on a hamsterwheel trying to figure out what I fucked up.

    Also, vi is the default editor? I feel like I'm in an alternate reality where #Fedora kinda sucks. I must've installed nano so long ago I don't remember

  38. Installed FedoraIOT baremetal, just to kick the tyres an with immutable/atomic before I try it on something like my daily driver.

    Man, #fedoraatomic doesn't suffer this fool. Not sure if it's #podman , #systemd or #selinux but what usually takes a few minutes with docker has me stuck on a hamsterwheel trying to figure out what I fucked up.

    Also, vi is the default editor? I feel like I'm in an alternate reality where #Fedora kinda sucks. I must've installed nano so long ago I don't remember

  39. Installed FedoraIOT baremetal, just to kick the tyres an with immutable/atomic before I try it on something like my daily driver.

    Man, #fedoraatomic doesn't suffer this fool. Not sure if it's #podman , #systemd or #selinux but what usually takes a few minutes with docker has me stuck on a hamsterwheel trying to figure out what I fucked up.

    Also, vi is the default editor? I feel like I'm in an alternate reality where #Fedora kinda sucks. I must've installed nano so long ago I don't remember

  40. Installed FedoraIOT baremetal, just to kick the tyres an with immutable/atomic before I try it on something like my daily driver.

    Man, #fedoraatomic doesn't suffer this fool. Not sure if it's #podman , #systemd or #selinux but what usually takes a few minutes with docker has me stuck on a hamsterwheel trying to figure out what I fucked up.

    Also, vi is the default editor? I feel like I'm in an alternate reality where #Fedora kinda sucks. I must've installed nano so long ago I don't remember

  41. @junebug FWIW, I've been using Linux as my primary OS for well over 20 years. (Setting up a printer used to suuuuuck!) And every now and then there's a "something" that doesn't quite work. (After an upgrade, it's almost always #SELinux.)

    However, the last couple of headscratchers had me turn to #ClaudeCode and damn if everything isn't working blindingly well now.

    Those obscure thingees ain't so obscure for the #SchocasticParrot.

  42. @junebug FWIW, I've been using Linux as my primary OS for well over 20 years. (Setting up a printer used to suuuuuck!) And every now and then there's a "something" that doesn't quite work. (After an upgrade, it's almost always #SELinux.)

    However, the last couple of headscratchers had me turn to #ClaudeCode and damn if everything isn't working blindingly well now.

    Those obscure thingees ain't so obscure for the #SchocasticParrot.

  43. @junebug FWIW, I've been using Linux as my primary OS for well over 20 years. (Setting up a printer used to suuuuuck!) And every now and then there's a "something" that doesn't quite work. (After an upgrade, it's almost always #SELinux.)

    However, the last couple of headscratchers had me turn to #ClaudeCode and damn if everything isn't working blindingly well now.

    Those obscure thingees ain't so obscure for the #SchocasticParrot.

  44. @junebug FWIW, I've been using Linux as my primary OS for well over 20 years. (Setting up a printer used to suuuuuck!) And every now and then there's a "something" that doesn't quite work. (After an upgrade, it's almost always #SELinux.)

    However, the last couple of headscratchers had me turn to #ClaudeCode and damn if everything isn't working blindingly well now.

    Those obscure thingees ain't so obscure for the #SchocasticParrot.

  45. Nur 2 von 100 #Linux-Distributionen sind tatsächlich sicher vorkonfiguriert: #Fedora und #openSUSE. In diesem Video (Englisch) wird es genauer erklärt.

    redirect.invidious.io/watch?v=

    #security #sicherheit #selinux #AppArmor

  46. Nur 2 von 100 #Linux-Distributionen sind tatsächlich sicher vorkonfiguriert: #Fedora und #openSUSE. In diesem Video (Englisch) wird es genauer erklärt.

    redirect.invidious.io/watch?v=

    #security #sicherheit #selinux #AppArmor