@[email protected] to [email protected]English • 12 days agoWe dont need onelemm.eeimagemessage-square91fedilinkarrow-up1362
arrow-up1362imageWe dont need onelemm.ee@[email protected] to [email protected]English • 12 days agomessage-square91fedilink
minus-squarePossibly linuxlinkfedilinkEnglish1•12 days agoThere is no security benefit with immutable Linux
minus-square🦄🦄🦄linkfedilink0•12 days agoCan you elaborate? Wouldn’t malware need to install something which would not happen on an immutable?
minus-square@[email protected]linkfedilink3•12 days agoImmutable distros can usually be set to mutable with the correct privileged command. It’s essentially security by obscurity. But I disagree with “no benefit”. An infection miss through dumb luck is still a miss, after all.
minus-squarePossibly linuxlinkfedilinkEnglish1•11 days agoIf malware has root access it can do whatever it wants Things like SElinux and sandboxing is what secures systems.
There is no security benefit with immutable Linux
Can you elaborate? Wouldn’t malware need to install something which would not happen on an immutable?
Immutable distros can usually be set to mutable with the correct privileged command.
It’s essentially security by obscurity. But I disagree with “no benefit”. An infection miss through dumb luck is still a miss, after all.
If malware has root access it can do whatever it wants
Things like SElinux and sandboxing is what secures systems.