Reply to thread

Message

<blockquote data-quote="Victor M" data-source="post: 1101579" data-attributes="member: 96560">Hi Everyone,Has anybody tried AlmaLinux?&nbsp; Scientific Linux just went defunct and pointed me to them. AlmaLinux is intended to replace CentOS as they now only offer a streaming version.I installed Alma and tried a few things.&nbsp; The things I like about it so far are:. The installation allows one to choose a Security Profile. OpenSCAP seems to be bundled and one can choose among several profiles like DISA, PCI DSS, HIPAA&nbsp; or some French govt regulatory body. This is similar to Ubuntu&#039;s usg. But Ubuntu&#039;s usg only has 2 profiles bundled, but usg offers a simplified setup. But activating usg is an extra few steps, whereas Alma allows you to do this during setup.. The SELinux xguest-u works correctly. One can map any user to xguest-u using&nbsp; [ICODE]sudo usermod -Z xguest-u &lt;yourAccount&gt;[/ICODE] and it offers a highly restricted environment. Perfect for surfing around.&nbsp; It may be able to replace firejail. (And firejail does not work with this configured account, citing inability to access /proc)&nbsp; This xguest-u setting does not work in Fedora.. You don&#039;t need to register with Red Hat to use the repository. I find Red Hat&#039;s registration site buggy. You have to go thru this registration to be able to use RHEL&#039;s repository If you use the free Red Hat Enterprise Linux (RHEL). It is based on RHEL 9 , the latest RHEL edition.</blockquote>

[QUOTE="Victor M, post: 1101579, member: 96560"] Hi Everyone, Has anybody tried AlmaLinux? Scientific Linux just went defunct and pointed me to them. AlmaLinux is intended to replace CentOS as they now only offer a streaming version. I installed Alma and tried a few things. The things I like about it so far are: . The installation allows one to choose a Security Profile. OpenSCAP seems to be bundled and one can choose among several profiles like DISA, PCI DSS, HIPAA or some French govt regulatory body. This is similar to Ubuntu's usg. But Ubuntu's usg only has 2 profiles bundled, but usg offers a simplified setup. But activating usg is an extra few steps, whereas Alma allows you to do this during setup. . The SELinux xguest-u works correctly. One can map any user to xguest-u using [ICODE]sudo usermod -Z xguest-u <yourAccount>[/ICODE] and it offers a highly restricted environment. Perfect for surfing around. It may be able to replace firejail. (And firejail does not work with this configured account, citing inability to access /proc) This xguest-u setting does not work in Fedora. . You don't need to register with Red Hat to use the repository. I find Red Hat's registration site buggy. You have to go thru this registration to be able to use RHEL's repository If you use the free Red Hat Enterprise Linux (RHEL) . It is based on RHEL 9 , the latest RHEL edition. [/QUOTE]

Verification