Arch: I need reproducible setups. Also bleeding edge is not for me.
I have to give credit to their documentation though!
Arch: I need reproducible setups. Also bleeding edge is not for me.
I have to give credit to their documentation though!
What put me off selinux is that the officially documented way of generating a new policy is to run a service unconfined, and then generating the policy from its behaviour. This is backwards on so many levels... In contrast policy-based admission control in kubernetes is a delight to use, and creating new policies is actually doable outside of a lab.
Consistency with their previous default desktop environment, Unity.