Linux @lemmy.ml joojmachine @lemmy.ml 8 mo. ago

Fedora 40 Change Proposal: Systemd Security Hardening

discussion.fedoraproject.org F40 Change Proposal: Systemd Security Hardening (System-Wide)

Enable systemd service hardening features for default system services This is a proposed Change for Fedora Linux. This document represents a proposed Change. As part of the Changes process, proposals are publicly announced in order to receive community feedback. This proposal will only be implement...

8 comments

For the most part, this seems a fairly sane proposal.
- Yep, it hardens the system and barely affects the user. Nothing but win here.
  
  another extremely common fedora W
- It can also be used to manually harden fedora 39, which I think is great as well!
Damn security guys are trying to justify their existence again.

My Fedora is single user and the system handily comes with one called 'root'
- This is good for precisely the single user case - potentially malicious services on your system can't view things they otherwise would be able to, or access resources they don't need. Even if it's under the same user.
- Can't tell whether you are joking or not

You've viewed 8 comments.