im using Rocky Linux 8.9, but kinda hate how the default user created is not in wheel and root account has to be activated, i don't really like having root accounts active, anybody know what's a good RHEL distro for minimal server these days?
Is there a con to having secure boot permanently disabled? Only reason i ask is because i recently had a weird issue where my pc wouldnt boot up at all after doing a hard reset. No bios no bazzite just no image coming from hdmi. Unplugged and plugged back in the power and i was given a load the kernel first message so i disabled secure boot and its all fine now. Is there any risk of having secure boot off forever?
I did tho. Thats how i was fine for the past few weeks up until today. Then this happened and i got the kernel message so i disabled secure boot and was fine afterwards
im in the same camp, you have to be careful about enabling it and enrolling your own custom keys and removing microsoft keys, ive heard of people bricking their systems doing this on some boards. I'd buy a system76 system with coreboot at some point in the future just to get away from secureboot
No worries lol. Yeah I figured itd be fine to have it disabled since the pc bazzite is installed to is essentially a console and nothing more. I dont use it ever for general browsing and other pc use.
that can be a way yes, malware just alters the bootloader so it always loads on boot and goes undetected by antivirus scanners, and sits on your computer, either logging everything you do, or punches holes in your network to allow bad actors to infiltrate
you gotta go out of your way to install malware, the only way you can download anything bad is randomly downloading stuff from shady websites, or if official repos would be compromised, which i think they have contingencies for anyway
the shadiest thing you can do on linux is install random things off the AUR tbh, on bazzite you need distrobox for that. The only thing distrobox would have access to is your home dir, not sure if it can even get your /usr directory, i don't think so
on Bazzite you get selinux out of the box too, which is one more layer to protect yourself, if all you do is download and play games from reputable places and keep your system up to date, there's nothing to worry about, just follow best safe practices