I really appreciate the GrapheneOS security model with detailed permissions for every app, including internet access.

I’d like to have something similar to that on my main OS. I like to be able to install an app without trusting it. So that I can be more lax with the FOSS projects and the proprietary stuff I use.

I use my PC for gaming, programming and personal stuff. I have been using Fedora for quite some time.

I know that QubesOS exists, and would give me the highest security and privacy guarantees, but i’d prefer something more elegant. I havent tried Qubes in 10 years though 🤔

Am I limited to Flatpak with Flatseal and similar solutions to Flatseal for AppImage?

Edit: I have a ryzen iGPU and a seperate dedicated GPU

  • DeltaWingDragon@sh.itjust.worksEnglish
    2·
    15 days ago

    You can use AppArmor to semi-automatically generate security profiles for each app. Once the profiles are in place, it will enforce Mandatory Access Control, securing each app that has a profile.

    Here’s a guide, it’s designed for Ubuntu but will work with any distro.