Fedora 40 Change Proposal: Systemd Security Hardening

joojmachine@lemmy.ml to Linux@lemmy.ml – 112 points –
F40 Change Proposal: Systemd Security Hardening (System-Wide)
discussion.fedoraproject.org
8

For the most part, this seems a fairly sane proposal.

Yep, it hardens the system and barely affects the user. Nothing but win here.

It can also be used to manually harden fedora 39, which I think is great as well!

Damn security guys are trying to justify their existence again.

My Fedora is single user and the system handily comes with one called 'root'

This is good for precisely the single user case - potentially malicious services on your system can't view things they otherwise would be able to, or access resources they don't need. Even if it's under the same user.