Alt: Troll Face Kendrick Mustard 67 Kid King Von Mango Phonk Edit

!この記事の作成にあたって、図の生成、調査、校正に生成AIを使用していますが、本文は人の手で書かれたものです。 環境Rocky Linux 10.2 あらすじ私の自宅サーバーでは、/var/composeにDocker Composeのファイル一式を格納し、composeユーザーでRootless Dockerを動かしています。Rocky Linux（というかRHEL）ではデフォルトでrootで動

KeenFox44: > linux generally is not recommended as its less secure than windows/macOS Linux can be very unsafe, sometimes even by default, but can also be the most secure OS. It all depends on your configuration. After all Linux is a kernel and an overall term for a huge ecosystem. If you have widely covered Mandatory Access Control like SELinux or TOMOYO, firewall like opensnitch, sandbox like bubblejail, your system is already much more secure than normal Windows and MacOS. These improves security the most with least effort. The next steps of hardening can include LUKS, use bootloader like limine and TPM verified boot chain, switch to linux-hardened or custom kernel, use Wayland and modern software, Desktop Environment with small attack surface, some auditd logging, encrypted backup, sysctl and kernel cmdline hardening, module pinning, allowlist of everything, etc. There are much more, I cannot list all of them here. If you setup your Linux like this in a consistent way (most likely require some professional knowledge in security) you can get a Linux **suitable for daily use** that is much more secure than average Windows and MacOS. (of course a system designed for special use cases can still be more secure than this, e.g. QubeOS and Android) Most modern Linux software can work on such a system, including Steam. If you want to customize like this, I recommend starting from Fedora (Fedora Atomic maybe?) or Arch (more convenient, easier to customize, smaller codebase, but requires extra hardening in supply chain).

I’ve been pretty impressed with the permissions management on the latest versions of MacOS. You can manage aspects like which programs may screen share, which programs can get full or partial access disk access (meaning no full disk access for terminal if you don’t use it), etc in the main settings menu. If something needs access, you get a popup and can enable it with fingerprint or password. This is possible in Linux with flatpak and SELinux, but it’s a helluva a lot more work to do this for every single program. There are also some vulnerabilties like username space in linux that SecureBlue tries to minimize, but since linux isn’t designed to be used like that it can create a lot of difficulties. MacOS is more of a cohesive whole where you can have these features without impacting usability or requiring a lot of time. This, of course, says nothing about privacy, closed versus open source, or the implications of supporting apple financially. With no apple ID, more private than windows or chromeos for sure though. I want to push people toward linux, but I don’t feel comfortable doing that with everyone given the current state of Macos and linux. If OP is successful with fedora and has no threat of targeted attacks, I don’t think they need to panic, buy a new PC, and switch to macos though.