▲ 48 ▼ Steam Deck owners: does SteamOS have any advantages over Bazzite? (lemmy.ml) submitted 1 week ago by onlooker@lemmy.ml to c/linux@lemmy.ml 24 comments fedilink hide all child comments
[–] novafunc@discuss.tchncs.de 2 points 1 week ago* (last edited 1 week ago) (1 child) You absolutely can sandbox using SELinux. Red Hat even has a tool called "sandbox" for just that: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/7/html/selinux_users_and_administrators_guide/chap-security-enhanced_linux-securing_programs_using_sandbox Edit: and Android sandboxing is built heavily around SELinux: https://source.android.com/docs/security/features/selinux permalink fedilink source parent hideshow 2 child comments replies: [–] SMillerNL@piefed.social 0 points 1 week ago Fair enough, you can do some sandboxing this way. But SELinux is not a sandboxing tool in the same way bubblewrap or landlock are. It’s a tool that can put gates around your tools until it’s a sandbox, but SELinux as sandboxing is not in the spirit of “tools doing one thing and doing it well” permalink fedilink source parent
[–] SMillerNL@piefed.social 0 points 1 week ago Fair enough, you can do some sandboxing this way. But SELinux is not a sandboxing tool in the same way bubblewrap or landlock are. It’s a tool that can put gates around your tools until it’s a sandbox, but SELinux as sandboxing is not in the spirit of “tools doing one thing and doing it well” permalink fedilink source parent