Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
mstdn.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A general-purpose Mastodon server with a 500 character limit. All languages are welcome.

Administered by:

Server stats:

14K
active users

mstdn.social: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.8

#apparmour

0 posts0 participants0 posts today
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://mastodon.social/@nixCraft" class="u-url mention">@<span>nixCraft</span></a></span> that is actually true...</p><p>Unless someone provides a program with <a href="https://mstdn.social/tags/root" class="mention hashtag" rel="tag">#<span>root</span></a> <a href="https://mstdn.social/tags/privilegues" class="mention hashtag" rel="tag">#<span>privilegues</span></a> it can only mess up the $HOME of the user account which it runs under.</p><p>This is why the default config for servers like <a href="https://mstdn.social/tags/Apache" class="mention hashtag" rel="tag">#<span>Apache</span></a> and <a href="https://mstdn.social/tags/PostgreSQL" class="mention hashtag" rel="tag">#<span>PostgreSQL</span></a> to literally be run as <a href="https://mstdn.social/tags/daemons" class="mention hashtag" rel="tag">#<span>daemons</span></a> or rather <a href="https://mstdn.social/tags/systemD" class="mention hashtag" rel="tag">#<span>systemD</span></a> services under dedicaded user accounts, so a webserver - even when hacked - can&#39;t f**k up the system.</p><p>It&#39;s part of the <a href="https://mstdn.social/tags/KISS" class="mention hashtag" rel="tag">#<span>KISS</span></a>-Approach to <a href="https://mstdn.social/tags/Users" class="mention hashtag" rel="tag">#<span>Users</span></a> and <a href="https://mstdn.social/tags/Groups" class="mention hashtag" rel="tag">#<span>Groups</span></a> in <a href="https://mstdn.social/tags/POSIX" class="mention hashtag" rel="tag">#<span>POSIX</span></a> and is supplemented with <a href="https://mstdn.social/tags/AppArmour" class="mention hashtag" rel="tag">#<span>AppArmour</span></a>...</p>
Gabriela Noriega 🏳️‍⚧️ 🇧🇷<p><span class="h-card"><a href="https://tech.lgbt/@kaitlynethylia" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>kaitlynethylia</span></a></span> Like <a href="https://tech.lgbt/tags/XDG" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>XDG</span></a> definately! Their system is far better for backups and for storing stuff in different drives (e.g. the binaries on the SSD and the data on the HDD)</p><p>Additionally, doing things by category first helps with writing <a href="https://tech.lgbt/tags/AppArmour" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>AppArmour</span></a> and <a href="https://tech.lgbt/tags/SELinux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SELinux</span></a> profiles.</p>
ExploreLive feeds
About