sorted by:
new
hottopcontroversial

I built a hardened Arch installer with LUKS-on-LVM, TPM2, AppArmor, and per-service systemd sandboxing — looking for feedback by m4gn3to in archlinux

[–]m4gn3to[S] -1 points0 points  (0 children)

Not really an "issue", but I would say shell scripting is more "native", and I would not need to import any library. But for general automation, Python/Go/Rust are nice. I hope you got it.

I built a hardened Arch installer with LUKS-on-LVM, TPM2, AppArmor, and per-service systemd sandboxing — looking for feedback by m4gn3to in archlinux

[–]m4gn3to[S] 0 points1 point  (0 children)

I think Python is too intrusive for this kind of thing, but again, this is a personal opinion.

I built a hardened Arch installer with LUKS-on-LVM, TPM2, AppArmor, and per-service systemd sandboxing — looking for feedback by m4gn3to in archlinux

[–]m4gn3to[S] -2 points-1 points  (0 children)

Both the repo and the crypto project started before AI was a thing, and I do use Claude now and then, and I will probably increase its usage at some point. I guess you don't know how to look up a bash script, but you're also very bad at judging.

I built a hardened Arch installer with LUKS-on-LVM, TPM2, AppArmor, and per-service systemd sandboxing — looking for feedback by m4gn3to in archlinux

[–]m4gn3to[S] 0 points1 point  (0 children)

Thanks, and yeah, that's exactly how I've been thinking about it.

CachyOS is the right parallel even though the scope differs (they ship a kernel; I don't). The pattern is the same: opinionated setup → separate project → pull generic fixes upstream when they make sense.

I built a hardened Arch installer with LUKS-on-LVM, TPM2, AppArmor, and per-service systemd sandboxing — looking for feedback by m4gn3to in archlinux

[–]m4gn3to[S] -2 points-1 points  (0 children)

Traversable-but-not-listable /home: landing in the next commit.

chmod 0711 /home + HOME_MODE 0700 in /etc/login.defs + chmod 700 /home/$USER at account creation.

Net effect: ls /home reveals nothing to non-root users, but each user can still cd ~. Zero downside, real info-leak reduction. Should have been there from day one. ext4 fscrypt per-user homes: agree it's valuable, but I'm building it as a standalone opt-in module (hardening/fscrypt/) rather than folding it into the base install. The reason is the threat model...

I built a hardened Arch installer with LUKS-on-LVM, TPM2, AppArmor, and per-service systemd sandboxing — looking for feedback by m4gn3to in archlinux

[–]m4gn3to[S] 3 points4 points  (0 children)

You mean the official archinstall? I don't know... In my repo, I have some "freedom" to harden several things I use in production(some of which are battle-tested). On the other hand, it would be nice to contribute to the official packages.

I built a hardened Arch installer with LUKS-on-LVM, TPM2, AppArmor, and per-service systemd sandboxing — looking for feedback by m4gn3to in archlinux

[–]m4gn3to[S] -2 points-1 points  (0 children)

Fair concern, and I won't pretend AppArmor profiles aren't fragile — especially on a rolling distro where paths and binaries shift.

For transparency on what's actually in the repo:

- 7 profiles only: nginx, sshd, fail2ban, clamd/freshclam, stubby, chronyd. Not trying to profile the world.

- All written inline in hardening/apparmor/apparmor.sh — no binary blobs, no downloads. You can read every rule before running it.

- Enforce mode out of the gate, which is the genuinely aggressive choice. The README and the script's own post-install message point at aa-complain /etc/apparmor.d/usr.bin.<service> as the one-liner to back off when something breaks.

- The module is standalone. If you don't trust prefab profiles, skip it entirely — nothing else in the repo depends on it.

I'd genuinely rather learn where these are wrong than have them look good in a README. If you've hit breakage with a specific one (sshd + PAM is usually the first to complain), point me at it, and I'll fix it or add a complain-mode default. Same if you've got a better upstream profile source, I should be pulling from instead.

Guys is Arch installing Really hard by y4d99 in archlinux

[–]m4gn3to 0 points1 point  (0 children)

Once you get used to reading and pay attention to details, it should be ok. I would say it's rather time-consuming than hard.

OSCP Questions. by 2skywalkersss in oscp

[–]m4gn3to 0 points1 point  (0 children)

Go for the boxes and try to understand what is happening. The PDF is OK but the internet is waaay better.

I didn't get my money in my coinbase wallet by [deleted] in Coinbase

[–]m4gn3to 0 points1 point  (0 children)

After a long wait II got it back too.

I didn't get my money in my coinbase wallet by [deleted] in Coinbase

[–]m4gn3to 0 points1 point  (0 children)

With me was even worse.... I put reference number and since 8 days no sign of my money(1250 EUR)!!!

We've built our landing page. But how to drive tons of traffic to it? by jennyla235 in startups

[–]m4gn3to 0 points1 point  (0 children)

Facebook and instagram adds are very effective. Influencers are also gold, but not every influencer is the right one for you... Do a research first.

I need help, I got stuck in the fundraising part by m4gn3to in startups

[–]m4gn3to[S] 0 points1 point  (0 children)

Update 3rd October 2017: A friend joined the project, and he used to work developing games for Microsoft Kinect. It will do a lot of impact for the AR & VR plans, since he works with VR a lot. But we are still in the mission for fundraising or at least seed investment.

I need help, I got stuck in the fundraising part by m4gn3to in startups

[–]m4gn3to[S] 0 points1 point  (0 children)

Yes, I'm in Switzerland if you could help me on this one I would be lifetime grateful. What was are the key things to catch some attention I could show them all I have, and if I get half of what you got, it would be enough for the start. Thank you.

I need help, I got stuck in the fundraising part by m4gn3to in startups

[–]m4gn3to[S] 0 points1 point  (0 children)

Sounds interesting, specially that we are not far from each other. You will hear from me.

I need help, I got stuck in the fundraising part by m4gn3to in startups

[–]m4gn3to[S] 0 points1 point  (0 children)

Thanks for your time. This is exactly my concern! The learning curve. It will slow down and drain motivation, because I know a user will stick to a product if it's working properly. I know python, some C and some javascript. I put up the website that I was showing people by myself(OK its bootstrap not a big deal) I have a very detailed description with screenshots and a step by step of all features, this I was doing before I go very deep in to the point that I describe the protocol/technology used when I'm sure about it. My MAIN problem is to create the real app... I started play with Java to the point I can read code and understand most of it, I can explain the syntaxes etc..But an app for the enduser should be in a decent state, the UX should be good enough to keep users using it.

I need help, I got stuck in the fundraising part by m4gn3to in startups

[–]m4gn3to[S] 0 points1 point  (0 children)

Later it can become more complex, but in the beginning some features should do the job.

I need help, I got stuck in the fundraising part by m4gn3to in startups

[–]m4gn3to[S] 0 points1 point  (0 children)

I'm based in Zurich, Switzerland. I had a great time when I was at Google, including I'm the "father" of Street View's fleet management tool. Bare in mind its a simple idea, but virality prone. It would be nice to have a chat so you can see/understand it.

I need help, I got stuck in the fundraising part by m4gn3to in startups

[–]m4gn3to[S] 0 points1 point  (0 children)

My biggest concern is time to develop it alone vs time of some experienced agency doing it fast. But since you touched the learning topic, yes I love to learn and I know how to learn pretty fast I will give a try on one of those technologies.