F40 Change Proposal: Systemd Security Hardening (System-Wide)
discussion.fedoraproject.org
Enable systemd service hardening features for default system services This is a proposed Change for Fedora Linux. This document represents a proposed Change. As part of the Changes process, proposals are publicly announced in order to receive community feedback. This proposal will only be implemented if approved by the Fedora Engineering Steering Committee. Wiki Announced This is a proposed Change for Fedora Linux. This document represents a proposed Change. As part of the Changes process, ...
  • 30021190
    38•1 year ago

    For the most part, this seems a fairly sane proposal.

  • @lightnegative
    5•1 year ago

    Damn security guys are trying to justify their existence again.

    My Fedora is single user and the system handily comes with one called ‘root’

    • @[email protected]
      2•1 year ago

      This is good for precisely the single user case - potentially malicious services on your system can’t view things they otherwise would be able to, or access resources they don’t need. Even if it’s under the same user.

    • @maryjayjay
      1•1 year ago

      Can’t tell whether you are joking or not