deleted

[[realNat]_Skate_360]

deleted

[Der tüddelige Fußgänger]

First
Verif the source code of all programs you use yourself

Second
Use Gentoo

Third
There isn't perfect security, there are always zero-days. That's something you have to accept, you can just limit the attack surface

[Der tüddelige Fußgänger]

Also from what i know, Linus Torvalds is the highest man on the Kernel. He has the last word.

Esit:
Maybe use some *BSD system if gnu/Linux gets too controled by corporations which it sadly gets.
The guy eho created systemd for example now even works at Microsoft

[i_nive]

Are you serious? If there are known(exploitable or not atm) backdoors in SELinux the world will go wild.

Regarding some of your other questions:
- https://en.wikipedia.org/wiki/Security-Enhanced_Linux#Implementations - about adoption;
- https://en.wikipedia.org/wiki/Security-Enhanced_Linux#Similar_systems_and_enhancements - about alternatives.

[Bloo Alien]

Originally posted by The Xenoblade X guy:

First
Verif the source code of all programs you use yourself

Second
Use Gentoo

The vast majority of folks are neither willing, nor able to do either of these first two things, due to various reasons, most of which are entirely valid for those people. Not everyone can be a total computer guru, and even if they could, not everyone wants to be.

Originally posted by The Xenoblade X guy:

Third
There isn't perfect security, there are always zero-days. That's something you have to accept, you can just limit the attack surface

This on the other hand is one hundred percent correct. Security is not "a thing" but is rather "a process". You have to take actions on a regular basis (check on various things, keep stuff up to date, learn new things, etc, etc…) to stay secure, and that's not even an absolute guarantee. Everyone can make mistakes, and there's always that chance someone else may pick that exact moment to take advantage.

Originally posted by The Xenoblade X guy:

The guy who created systemd for example now even works at Microsoft

That one's kinda worrisome, despite Microsoft's claim that they <3 Linux now. (Still waiting for the ol' "Embrace, Extend, Extinguish" thing to maybe rear its ugly head again.)

[LeviathanWon]

Does the NSA play video game when they doing NSA stuff? I always wanted to know.

[BezaoBuilder]

SELinux was software made by NSA, but it is in the hands of the kernel community now, the kernel community reviewed all of its source code. I'd argue SELinux is not NSA software (the Wikipedia page also states that Red Hat is the developer and points it as one of the authors alongside NSA). Granted, they could have put an indetectable backdoor.
Well, given Fedora's upstream policy, if they did find malicious code in SELinux, they would have sent a patch to Linus.
Linus didn't leave, he took a break once, he is still active in the kernel community. If I remember correctly, Richard Stallman left the FSF due to some controversies, but now he is back (which prompted Fedora, Red Hat, Free Software Foundation Europe and the Document Foundation to cut ties with the FSF). Many projects, such as KDE and Tor criticized the decision.
The GNU Project has a list of 100% free distros: https://www.gnu.org/distros/free-distros.html Fedora and Debian would meet the criteria if it were not for firmware (which does not run on your CPU).
To verify yourself the system is 100% legit, review all of the code, compile it yourself, and do Diversive Double-Compiling on the compiler itself. Gentoo Linux is designed around the idea that you compile the software yourself.

[BezaoBuilder]

SELinux can be disabled by changing grub kernel options.
"sudo grubby --update-kernel ALL --args selinux=0" should do it.
Don't know if this will actually disable the kernel code. Probably not.

[Der tüddelige Fußgänger]

Originally posted by BezaoBuilder:

SELinux was software made by NSA, but it is in the hands of the kernel community now, the kernel community reviewed all of its source code. I'd argue SELinux is not NSA software (the Wikipedia page also states that Red Hat is the developer and points it as one of the authors alongside NSA). Granted, they could have put an indetectable backdoor.
Well, given Fedora's upstream policy, if they did find malicious code in SELinux, they would have sent a patch to Linus.
Linus didn't leave, he took a break once, he is still active in the kernel community. If I remember correctly, Richard Stallman left the FSF due to some controversies, but now he is back (which prompted Fedora, Red Hat, Free Software Foundation Europe and the Document Foundation to cut ties with the FSF). Many projects, such as KDE and Tor criticized the decision.
The GNU Project has a list of 100% free distros: https://www.gnu.org/distros/free-distros.html Fedora and Debian would meet the criteria if it were not for firmware (which does not run on your CPU).
To verify yourself the system is 100% legit, review all of the code, compile it yourself, and do Diversive Double-Compiling on the compiler itself. Gentoo Linux is designed around the idea that you compile the software yourself.

Debian is not on the list because it has proprietary programs in the repos and i think even in the kernel.
Hence why distros like Parabola use the libre-kernel

[Si]

View the source code and compile from source, alternatively use one of the GNU recommended distros. Debian may be an alternative but it has binary blobs in the kernel so it depends on your paranoia level whether you trust it or not.

Honestly some of those GNU recommended distros look ok but you need to make sure you're running them on hardware that will play nicely.

I wouldn't worry too much you installed steam which is proprietary and I assume you've installed games which can be full of all sorts of nasties and spyware (look up redshell). There are bigger things to worry about if you're running games than a linux distro or linux software.

[Zyro]

Originally posted by Si:

View the source code and compile from source, alternatively use one of the GNU recommended distros. Debian may be an alternative but it has binary blobs in the kernel so it depends on your paranoia level whether you trust it or not.

Debian removed all binary BLOBs from the kernel, already 18 years ago.
https://lwn.net/Articles/100597/

[Omega]

SELinux is the most impactful and effective method to enforce strict MAC (Mandatory access control). It is immensely complex in its usage but if properly configured it can render even the most severe vulnerabilities a program might have unexploitable.

Red Hat is the primary maintainer. Most of the largest GNU/Linux distros have SELinux enabled by default or available as an easy enable. So there is plenty of eyes on the code.

The NSA isn't exclusively interested in sticking their fingers in to every pie, they are also focused on hardening domestic IT infra.

SELinux can be trusted. And if you don't there is always Apparmor, which is not as extensive but I do still highly recommend as default for any Linux install.

[LeviathanWon]

apparmor is run by IRA, switch to that...

Oh I love remote cloud servers, I want to launch them into space so there will be no more cloud servers, gonna call them gas cloud servers, cause they are full of space farts.

[LeviathanWon]

They after you! They after us all, farming us for our souls!

Come on nat, go play games have fun and learn.

[LeviathanWon]

You go ahead and do what ever you want, feel good about yourself.

[Der tüddelige Fußgänger]

Also if you care about security
openSUS uses apparmor, blocks the ssh port and has an aggressiv firewall by default with firewalld.