Apparmor, SELinux, grsecurity on Qubes?

[ppc]

@qun

what is about the security frameworks in Qubes? As I understand, they are not on board, but why?

Easy hardening for beginners

Qubes aims to ship with secure defaults, so no general hardening should be necessary (unlike an operating system that was not designed primarily with security in mind). Anything not done by default is probably something that depends on the user’s unique situation (use case, threat model, etc.). In other words, if there’s something that all users should do as soon as they install Qubes OS in order to harden the system, then we (the project) should simply make that the default and ship Qubes that …

Anything not done by default is probably something that depends on the user’s unique situation (use case, threat model, etc.)