I never worried on Windows about security as much as I should have, it just so happens I've been lucky to have never been hit with ransomware. By the time...

TL;DR - About switching from Linux Mint to Qubes OS from among various other options that try to provide security out-of-the-box (also discussed: OpenBSD, SculptOS, Ghaf, GrapheneOS)

  • aaravchen@lemmy.zipEnglish
    1·
    1 day ago

    And it’s only necessary because Nix doesn’t include it. Which is the only way anything is allowed to run on an SELinux system. SELinux doesn’t require Nix mutation, it requires Nix to be complete.

    There are workarounds to fix Nix’s incomplete definitions, but most end users opt for the easy post-install solution that ends up mutating thier store rather than including the fix as a unique derivation for every package to add the missing SElinux labels and policy.

    • iopq@lemmy.world
      1·
      18 hours ago

      Which is what I was talking about when I said immutable systems need a first party solution. Meaning the system itself needs to implement it, you can’t bolt it on with packages or services