Performance impact

Posted Aug 5, 2022 13:33 UTC (Fri) by pizza (subscriber, #46)
In reply to: Performance impact by Cyberax
Parent article: Security requirements for new kernel features

> Like, pretty much all classic desktops? I've yet to see a developer with "serious" LSMs like SELinux turned on.

Fedora and RHEL, at least, have SELinux on out of the box.

All but one of my Linux installations have SELinux enabled (the exception is a heavily-used snowflake shell server whose install predates this SELinux stuff), including my two daily-use desktops (and several others I am responsible for).

Additionally, nearly every Android device out there relies on SELinux to enforce app isolation.