gistambo

> This is a little unexpected - I do my development work on a Fedora machine with selinux in enforcing mode, without issue as the binary ends up unconfined. >...

> Given the emphasis on hardening here, what are the barriers to running in non-setuid mode for your workflows? Are you able to use unprivileged user namespaces within your hardening...