SELinux

7 engineers on Hacker News describe using SELinux first-hand: 2 endorse it, 1 regret it, 0 are mixed.

60%trust
7first-hand users
6in production
endorse 2mixed 0regret 1uses, no opinion

“Yet somehow we run SELinux successfully on every Android device.”

endorse · production · debatem1 · 2019-08-03 · source ↗ · wrong label?

“for example, the mucking about SELinux on fedora is a recipe for disaster.”

regret · personal · sandGorgon · 2016-12-15 · source ↗ · wrong label?

“We run SELinux on all our docker hosts and are about to roll out GRSecurty as well, at present this is one of the best lines of defence”

endorse · production · mrmondo · 2015-02-25 · source ↗ · wrong label?

“even today our security relies on SELinux, how we remapped user account creation”

neutral · production · giis · 2026-03-30 · source ↗ · wrong label?

“Even after mastering all the fundamentals of SELinux, six month later a different audit-related problem surfaced”

neutral · production · egberts1 · 2022-04-27 · source ↗ · wrong label?

“we had a custom SELinux module that we suspected had the issue.”

neutral · production · actionowl · 2020-10-20 · source ↗ · wrong label?

“we do patch them with GRSecurity and ensure SELinux is enforcing.”

neutral · production · mrmondo · 2015-03-19 · source ↗ · wrong label?