-25
submitted 1 week ago by Pro@programming.dev to c/linux@lemmy.world
  • Not all distros ship SELinux and the ones that do, don't actually configure it securely.

  • New users are expected to keep copying and pasting commands from their browsers to their terminal which compromises some Linux security defenses.

  • KDE, GNOME and Sway are the only functional Desktop Environments/Window Managers that support Wayland all, while the Other DEs are not even close to shipping with Wayland.

  • Most if not all of the Linux Distros in 2025 ship with Grub bootloader, which suffers from a lot of problems, instead of using the bootloaders that does not support BIOS and will improve the reliability of booting and provide a more stable experience.

top 7 comments
sorted by: hot top controversial new old
[-] Dirk@lemmy.ml 18 points 1 week ago

New users are expected to keep copying and pasting commands from their browsers to their terminal which compromises some Linux security defenses.

To me, this is the worst issue here.

Even large Projects suggest things that are basically curl | sh – without even mentioning anything about how this could be problematic.

New user are “trained” doing this.

Every project suggesting it should be not only opposed but actively fought against until they change this bullshit.

[-] GolfNovemberUniform@infosec.pub 6 points 1 week ago

Yea this is a very unpopular opinion.

Not all distros ship SELinux and the ones that do, don't actually configure it securely.

Convenience issues.

New users are expected to keep copying and pasting commands from their browsers to their terminal which compromises some Linux security defenses.

Everyone literally says not to do that, including popular content creators.

KDE, GNOME and Sway are the only functional Desktop Environments/Window Managers that support Wayland all, while the Other DEs are not even close to shipping with Wayland.

Wayland is massive and probably will never actually be finished. Also implementing it basically means rewriting the whole DE (not really but it's a ton of work).

Most if not all of the Linux Distros in 2025 ship with Grub bootloader, which suffers from a lot of problems, instead of using the bootloaders that does not support BIOS and will improve the reliability of booting and provide a more stable experience.

That's called "planned obsolescence".

[-] hendrik@palaver.p3x.de 5 points 1 week ago* (last edited 1 week ago)

Is SELinux really that important for the average desktop user? I mean we have a lot of concepts like different system user accounts which run services, namespaces...

And I feel we'd need more sandboxing and a permission system for desktop apps so they have to ask before reading your Documents directory and access the webcam. That'd do way more than SELinux as is.... And we kind of have none of that to begin with. (...except software installed as Flatpaks, to some degree.)

[-] FrostyPolicy@suppo.fi 1 points 1 week ago

Not all distros ship SELinux and the ones that do, don’t actually configure it securely.

You're welcome to work with distro maintainers to fix this instead of just complaining about it.

New users are expected to keep copying and pasting commands from their browsers to their terminal which compromises some Linux security defenses.

This is a big problem

Most if not all of the Linux Distros in 2025 ship with Grub bootloader, which suffers from a lot of problems, instead of using the bootloaders that does not support BIOS and will improve the reliability of booting and provide a more stable experience.

You're welcome to work with distro maintainers to fix this instead of just complaining about it.

[-] anon5621@lemmy.ml 1 points 1 week ago* (last edited 1 week ago)
  1. I agree mostly yeah it should be by default(but also depends from usecase too if we installing distro as many people doing on old hardware it would even more slow PC)

  2. Copy pasting would damage mac os, windows including too so it's just human factor

  3. Wayland is protocol not server and to implement full stack u need a lot resources and not small team meanwhile x11 it's ready to go graphical server universal one

  4. About this some distros installing systemd-boot if installer detecting efi variables if legacy system it installing grub.

All depends from threat surface attack and what we are trying to defend.

[-] ada@piefed.blahaj.zone 2 points 1 week ago

Cachy installs systemd-boot by default, but in the end I had to manually install grub, because systemd-boot doesn't play nice with btrfs snapshots when you do a kernel upgrade.

[-] AkatsukiLevi@lemmy.world -1 points 1 week ago

Okay, I call bs on the Wayland part

When was the last time you suffered from a exploit on X11? Most distros even setup X11 to be localhost only

X11 has a lot of problems, but claiming it is insecure by default is kinda bs

Changing from UDP to TCP when you aren't using TLS at all doesn't solve the issue

this post was submitted on 29 Jun 2025
-25 points (23.4% liked)

Linux

11753 readers
76 users here now

Welcome to c/linux!

Welcome to our thriving Linux community! Whether you're a seasoned Linux enthusiast or just starting your journey, we're excited to have you here. Explore, learn, and collaborate with like-minded individuals who share a passion for open-source software and the endless possibilities it offers. Together, let's dive into the world of Linux and embrace the power of freedom, customization, and innovation. Enjoy your stay and feel free to join the vibrant discussions that await you!

Rules:

  1. Stay on topic: Posts and discussions should be related to Linux, open source software, and related technologies.

  2. Be respectful: Treat fellow community members with respect and courtesy.

  3. Quality over quantity: Share informative and thought-provoking content.

  4. No spam or self-promotion: Avoid excessive self-promotion or spamming.

  5. No NSFW adult content

  6. Follow general lemmy guidelines.

founded 2 years ago
MODERATORS