Accounts with sudo

[jakfrost (Stephen Douglas Snow)]

@boredsquirrel

This is pretty insane. Any randomly downloaded Appimage can edit those and alias your sudo command as explained in the article.

Probably a good argument for using systemd-home if there ever was one.

@boredsquirrel

I would be really happy about the Fedora Community addressing these problems.

Maybe the Security enthusiasts call will bring some to tackle this …

Security enthusiasts wanted: from beginners up to SELinux experts to make up the SELinux "Confined Users (SIG)" to foster Fedora's security capabilities

SELinux provides a strong security measure that can make an SELinux-enabled operating system a type of “fortress”: the so-called “confined users” [1] [2] [3], which add security and isolation capabilities that are in several respects comparable to containers but without many of their restrictions in GUI use cases (this topic is focused on desktop use cases, not server, infra, and such). By default, SELinux does not enforce much within user accounts but only around them. But in graphical desktop…