Vision: Secure by default and almost useful
The defaults for users
- the goal is to have image, but we can start with scripts, it could be ansible
- and what about the specfile (like we have fedora-minimal)
- gnome or i3 -- big question
- noscript feels so hard, let's use ublock
- firefox in private mode
- sudoers should be sane
- selinux policy can perhaps be improved
- a fallback to unconfined_t root may still be needed
- multiuser (not single user)
- pam namespaces
- and what about rolekit, does it work?
- rolekit is supposed to set a system to provide roles like database server, filesystem server, web server ...
- basically xguest on drugs
- xguest created new stuff for each session
- we want to keep the previous sessions