Fedora is security? I mean, don’t get me wrong, I love it, it’s my daily driver after trying just about every distro under the sun, but I would’ve figured something like Qubes would stand head and shoulders above it.
I haven’t looked around that much in years beyond NixOS, what else has MAC by default these days? I remember a lot of the Debian based ones having some things constrained by AppArmor, but I personally prefer SELinux and it wasn’t everything.
I don’t know if it ships with a firewall, but that’s definitely easier than an ad hoc SELinux setup. I always just transfer my iptables (nftables now) rules over.
I mean, image based (immutable) distros are quite a bit more secure than regular ones, and Fedora Atomic (Silverblue, Bazzite, etc.) is pretty much the only great choice when it comes to those kind of operating systems.
Fedora is security? I mean, don’t get me wrong, I love it, it’s my daily driver after trying just about every distro under the sun, but I would’ve figured something like Qubes would stand head and shoulders above it.
i would say fedora is the “security distro for every day people” kind of distro
Qubes is specialised, whereas Fedora is a general purpose distro with a security focus.
Fedora doesn’t have any more of a security focus than anything else in the industry
It has SELinux, what does ubuntu (for example) has?
Apparmor
One of the few with SELinux by default
Outside of everything else that has MAC enabled by default. It doesn’t even ship with a Firewall.
I haven’t looked around that much in years beyond NixOS, what else has MAC by default these days? I remember a lot of the Debian based ones having some things constrained by AppArmor, but I personally prefer SELinux and it wasn’t everything.
I don’t know if it ships with a firewall, but that’s definitely easier than an ad hoc SELinux setup. I always just transfer my iptables (nftables now) rules over.
Maybe Fedora Atomic?
I mean, image based (immutable) distros are quite a bit more secure than regular ones, and Fedora Atomic (Silverblue, Bazzite, etc.) is pretty much the only great choice when it comes to those kind of operating systems.
As a Fedora user, I thought Debian would be more secure.