Back in my 2019 article “The Desktop Security Nightmare”, I noted that on most of our desktops, we don’t have good control of what data a program can access and when. I noted that we have things like AppArmor, which is something, but not the entire picture. SELinux is so extremely complicated that even Ted T’so had a comment about never getting some of his life back. I don’t like complexity, especially when it comes to security.
