Which OS for private secure internet browsing PC?

[username0990]

@Anon47486929

No offense, but your link doesn’t talk anything. It’s a link to a forum question asked 1 day ago about Firefox with no responses. So I would prefer if we don’t imply that the link was useful in any way in knowing what your exact concerns are.

No offense, but that was not the only link I posted.

@Anon47486929

I think you have a misunderstanding about fedora security model. SELinux is a kernel level MAC that confines system process in fedora.

Actually, I am aware of that, but we know that they have been working on the userspace confinement for some time. Secureblue - Immutable Fedora Hardening - #62 by qoijjj

@Anon47486929

If you are asking if non flatpak browser is confined, then I’d recommend you go through the fedora docs and secureblue hardening guide, and understand it from the primary source how applications are usually confined. That might also help dispel certain ideas that are incorrect about how fedora and it’s derivatives work. Secureblue does not write custom selinux policies, it merely enables flags already present in the kernel.

Yes, I have already commented on this in the secureblue thread.

@username0990

IMHO, it could be clarified how other internet browsers (Brave, Firefox, Tor Browser, etc.) should be installed and whether bubblejail should be used for those browsers.

Eventually secureblue users will want to use other browsers. There’s a general recommendation in the secureblue you suggested to use bubblejail only if the flatpak package of the applications is not going to be installed. There is no mention of whether the hardened chromium browser uses bubblejail or not, nor whether it is necessary for browsers. If there is something missing here, it might be worth mentioning it.