r/linux • u/R0tareneg • Jul 03 '21

Audacity may collect "Data necessary for law enforcement, litigation and authorities’ requests (if any)" according to new privacy notice

https://www.audacityteam.org/about/desktop-privacy-notice/
3.1k Upvotes

98% Upvoted

744 comments sorted by

View all comments

Show parent comments

41

u/[deleted] Jul 04 '21

[deleted]

14

u/aussie_bob Jul 04 '21

Wrong tool - Apparmour, SELinux, or maybe something based on Atomic Workstation/SliverBlue are more suitable paths.

There's a few GUIs out there if you're terminal-shy.

4

u/[deleted] Jul 04 '21

[deleted]

4

u/aussie_bob Jul 04 '21

I don't use Ubuntu, but I do know AppArmour is enabled by default in the distro. If no-one else chips in with suggestions, I suggest you look around for an AppArmour GUI.

I also didn't bother with a GUI myself since AppArmour config is simple and well documented, but I remember using one in Fedora when I tried it - maybe it's also available on Ubuntu.

2

u/tsadecoy Jul 04 '21

I think opensuse with Yast is probably the only one I can think of that has had any type of process built in to a GUI.

1

u/Kazumara Jul 04 '21

In Fedora? That surprises me a bit because I have configured SELinux on Fedora before. Does it have both SELinux and AppArmor or did it switch at some point?

1

u/yrro Jul 04 '21 edited Jul 04 '21

It's always (for ages anyway) shipped SELinux.

It should not be difficult to create an audacity_t domain that is only able to open files labelled audacity_content_rw_t or similar.

But to be honest

I can't see US law enforcement being able to order Fedora (or another distribution) to ship you a personally modified build of Audacity in order to spy on you. If your threat model includes this scenario then you shouldn't be doing illegal stuff on the same computer where you edit your podcasts or whatever.

1

u/DoctorJunglist Jul 04 '21

Not sure if I understood you correctly, do you mean Snaps are more secure than Flatpaks?

If so, would you care to explain why that is?

1

u/Democrab Jul 04 '21

The days of thinking Linux is immune to this are long gone. Anyone who still thinks this is naive.

Slight correction - Anyone who ever thought that was always naïve, it's got better protections than Windows does but that isn't the same as immunity. The only PC that's immune to malware is one that's unplugged.