{"slug": "selinux", "name": "SELinux", "category": "security", "category_name": "Security and passwords", "description": "", "recommenders": 3, "commenters": 3, "warners": 0, "score": 2.806, "rising": 1.67, "first": "2026-04-11", "latest": "2026-09-15", "why": "Selinux does the rest and we encourage devs to write policies for their applications.", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 3, "neutral": 0, "compare": 0, "warn": 0}, "spark": [0, 0, 0, 0, 0, 1, 0, 0, 0, 1, 1, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "Selinux does the rest and we encourage devs to write policies for their applications.", "icon": false, "domain": null, "github_repo": null, "official_url": "https://selinuxproject.org", "pricing": "", "aliases": ["SELinux"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 795396626, "item_id": 49712289, "url": "https://news.ycombinator.com/item?id=49712289", "by": "here_to_learn", "date": "2026-09-15", "stance": "recommend", "quote": "I was worried about SELinux but find Fedoras defaults just fine and intuitive.", "excerpt": "I moved to Fedora from Ubuntu about a year ago for my laptop. My main motivation was not be defaulted to snap packages. I have had a great experience i.e it gets out of the way and it doesn't fall apart when I update stuff. I was worried about SELinux but find Fedoras defaults just fine and intuitive.", "context": "", "use_case": "", "switched_from": "", "story": "Ubuntu 26.10 completes transition to Rust-based coreutils"}, {"id": 789940530, "item_id": 49371283, "url": "https://news.ycombinator.com/item?id=49371283", "by": "insanitybit", "date": "2026-08-19", "stance": "recommend", "quote": "apparmor/selinux pair incredibly well", "excerpt": "> Moving code into gvisor virtually eliminates privilege escalation. Rereading this, it's an overstatement. It doesn't \"virtually eliminate\" it. It drives the cost up by like 3 orders of magnitude and it pairs well with other mitigations. gVisor escapes can and will happen, I highly recommend you do more than just stuff something into gvisor - additional seccomp can go a long way, and apparmor/selinux pair incredibly", "context": "", "use_case": "hardening", "switched_from": "", "story": "Pacing model development in an era of cyber-critical capabilities"}, {"id": 763756096, "item_id": 47734756, "url": "https://news.ycombinator.com/item?id=47734756", "by": "stop50", "date": "2026-04-11", "stance": "recommend", "quote": "Selinux does the rest and we encourage devs to write policies for their applications.", "excerpt": "Our devs can't install software without an reason or check. External packages/modules/... have an 24 hour delay, except for retractions and are scanned for malware. Selinux does the rest and we encourage devs to write policies for their applications.", "context": "works on a team managing developer machines", "use_case": "access control for dev machines", "switched_from": "", "story": "Ask HN: Has anyone reconsidered Antivirus software after recent security news?"}]}], "caveats": [], "who": [{"by": "stop50", "context": "works on a team managing developer machines", "url": "https://news.ycombinator.com/item?id=47734756", "date": "2026-04-11"}], "tags": [], "use_cases": ["hardening", "access control for dev machines"], "compared": [], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=49696697", "title": "Ubuntu 26.10 completes transition to Rust-based coreutils", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=49350031", "title": "Pacing model development in an era of cyber-critical capabilities", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47734140", "title": "Ask HN: Has anyone reconsidered Antivirus software after recent security news?", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {}, "2026-01": {}, "2026-02": {}, "2026-03": {}, "2026-04": {"recommend": 1}, "2026-05": {}, "2026-06": {}, "2026-07": {}, "2026-08": {"recommend": 1}, "2026-09": {"recommend": 1}, "2026-10": {}}, "quotes": [{"id": 795396626, "item_id": 49712289, "url": "https://news.ycombinator.com/item?id=49712289", "by": "here_to_learn", "date": "2026-09-15", "stance": "recommend", "quote": "I was worried about SELinux but find Fedoras defaults just fine and intuitive.", "excerpt": "I moved to Fedora from Ubuntu about a year ago for my laptop. My main motivation was not be defaulted to snap packages. I have had a great experience i.e it gets out of the way and it doesn't fall apart when I update stuff. I was worried about SELinux but find Fedoras defaults just fine and intuitive.", "context": "", "use_case": "", "switched_from": "", "story": "Ubuntu 26.10 completes transition to Rust-based coreutils"}, {"id": 789940530, "item_id": 49371283, "url": "https://news.ycombinator.com/item?id=49371283", "by": "insanitybit", "date": "2026-08-19", "stance": "recommend", "quote": "apparmor/selinux pair incredibly well", "excerpt": "> Moving code into gvisor virtually eliminates privilege escalation. Rereading this, it's an overstatement. It doesn't \"virtually eliminate\" it. It drives the cost up by like 3 orders of magnitude and it pairs well with other mitigations. gVisor escapes can and will happen, I highly recommend you do more than just stuff something into gvisor - additional seccomp can go a long way, and apparmor/selinux pair incredibly", "context": "", "use_case": "hardening", "switched_from": "", "story": "Pacing model development in an era of cyber-critical capabilities"}, {"id": 763756096, "item_id": 47734756, "url": "https://news.ycombinator.com/item?id=47734756", "by": "stop50", "date": "2026-04-11", "stance": "recommend", "quote": "Selinux does the rest and we encourage devs to write policies for their applications.", "excerpt": "Our devs can't install software without an reason or check. External packages/modules/... have an 24 hour delay, except for retractions and are scanned for malware. Selinux does the rest and we encourage devs to write policies for their applications.", "context": "works on a team managing developer machines", "use_case": "access control for dev machines", "switched_from": "", "story": "Ask HN: Has anyone reconsidered Antivirus software after recent security news?"}]}