• 10 Posts
  • 1.56K Comments
Joined 3 years ago
cake
Cake day: July 7th, 2023

help-circle




  • The distro doesn’t matter, the Desktop Environment does.

    If they are used to MacOS and want something simple and “out of the way”, go with Gnome.

    If they are used to Windows, go with KDE.

    Fedora is probably the most straightforward to install and manage right now. You won’t need to “lock down” anything if you don’t give them sudo credentials.and just a regular user account.










  • The security model skews towards convenience versus absolute security, meaning automation is it’s goal, not perfect security. They use a reasonable amount of security to protect unauthorized access, meaning untrusted apps can’t access keys by default, and container apps only have selective access. AppArmor is supposed to be handling some DBUS interactions in the background to prevent any old app from grabbing everything, but again, automation is the purpose here.

    If you don’t have a reasonably trusted system, then sure, it’s about as secure as any other password manager. I remember reading some time ago there was a plan to make a global framework for trusted application.accessnto things like this, but it was shot down for being “oppressive” in the same way as Microsoft’s trust app mess.

    Ideally there would be an advanced mode where each app is granted access to specific keys, and that interaction is controlled by the user. This would never be the default obviously as the user interaction would be an insane annoyance to people who don’t care.