• MangoCats@feddit.it
    link
    fedilink
    English
    arrow-up
    0
    ·
    1 month ago

    easily solved by not giving them root access.

    Root vs non-root is, in a nutshell, a tangled mess with millions of opportunities for “oops, didn’t think of that” situations: https://www.cve.org/downloads

    Immutable keeps the legacy system confituration basically unchanged, but also restores it “from ROM” every time you power on. (not real ROM, but effectively.) In an immutable system, the attack surface is dramatically reduced, and much more diverse among systems than with a mutable OS.

    • ranzispa@mander.xyz
      link
      fedilink
      arrow-up
      0
      ·
      1 month ago

      I reckon this must be true. However I do not see this as a reason for wide adoption of immutable systems. I guess that is a fairly valid use case.

      I’d like to understand why some users are enthusiastic about bazzite. As of now I understood two of the reasons:

      • updates work and do not break the system
      • it is a bit more secure

      However I do not understand why these two things make their users so enthusiastic. It’s two things you rarely worry about when using a computer. They are indeed important, but in my opinion not much of a problem in modern distributions.

      In the other hand you have to install everything through flatpak, which is something which would really get to my nerves.

      I understand there are some good advantages, I just fail to understand which ones those are.

      • marcie (she/her)@lemmy.mlOP
        link
        fedilink
        arrow-up
        1
        ·
        edit-2
        1 month ago

        It requires literally zero work from me to maintain, that’s why I’m enthusiastic and want the project to do well. Saying mutable Linux is zero work is dead wrong. And if you do put work into your system, it actually sticks and doesn’t decide to explode one day over it.