On: Multiple new macOS sandbox escape vulnerabilities

[mu53]

SELinux is for distro and package maintainers to use. Not end users.

[lmz → mu53]

And yet for a large number of years any RHEL/CentOS SELinux issues with third party software were answered with "disable SELinux".

[snakeyjake → lmz]

A large number of years up to and including "this year, right now, like, yesterday".

[homebrewer → lmz]

Same for Windows' UAC in the Vista era, which doesn't make it bad technology or place the fault on Microsoft. The world is full of terrible development practices, the answer shouldn't be "just disable your security mechanisms".

[lmz → homebrewer]

So you agree that end users do use it and are often incapable of getting the things they want to work with it?