this post was submitted on 07 Mar 2024
598 points (96.9% liked)

linuxmemes

24570 readers
2919 users here now

Hint: :q!


Sister communities:


Community rules (click to expand)

1. Follow the site-wide rules

2. Be civil
  • Understand the difference between a joke and an insult.
  • Do not harrass or attack users for any reason. This includes using blanket terms, like "every user of thing".
  • Don't get baited into back-and-forth insults. We are not animals.
  • Leave remarks of "peasantry" to the PCMR community. If you dislike an OS/service/application, attack the thing you dislike, not the individuals who use it. Some people may not have a choice.
  • Bigotry will not be tolerated.
  • 3. Post Linux-related content
  • Including Unix and BSD.
  • Non-Linux content is acceptable as long as it makes a reference to Linux. For example, the poorly made mockery of sudo in Windows.
  • No porn, no politics, no trolling or ragebaiting.
  • 4. No recent reposts
  • Everybody uses Arch btw, can't quit Vim, <loves/tolerates/hates> systemd, and wants to interject for a moment. You can stop now.
  • 5. πŸ‡¬πŸ‡§ Language/язык/Sprache
  • This is primarily an English-speaking community. πŸ‡¬πŸ‡§πŸ‡¦πŸ‡ΊπŸ‡ΊπŸ‡Έ
  • Comments written in other languages are allowed.
  • The substance of a post should be comprehensible for people who only speak English.
  • Titles and post bodies written in other languages will be allowed, but only as long as the above rule is observed.
  • 6. (NEW!) Regarding public figuresWe all have our opinions, and certain public figures can be divisive. Keep in mind that this is a community for memes and light-hearted fun, not for airing grievances or leveling accusations.
  • Keep discussions polite and free of disparagement.
  • We are never in possession of all of the facts. Defamatory comments will not be tolerated.
  • Discussions that get too heated will be locked and offending comments removed.
  • Β 

    Please report posts and comments that break these rules!


    Important: never execute code or follow advice that you don't understand or can't verify, especially here. The word of the day is credibility. This is a meme community -- even the most helpful comments might just be shitposts that can damage your system. Be aware, be smart, don't remove France.

    founded 2 years ago
    MODERATORS
     
    you are viewing a single comment's thread
    view the rest of the comments
    [–] [email protected] 30 points 1 year ago (3 children)

    I was thinking about this the other day. Windows 11 is starting to roll out on company laptops and I would love it if we had the choice to install Linux. But I think there are some challenges to that.

    Most large companies control what employees are allowed to install on their machines for security reasons. We wouldn't want any spyware or ransomware or any kind of malware getting installed inadvertently. Most places will use software allow lists through applications like the Software Center and use software detection programs to monitor if any non compliant software is installed.

    There's also permission management through group policies on Windows to manage which kind of user can do what on their system.

    Finally, I hate to say it, but most companies use the whole Microsoft Office 365 eco system with Microsoft One Drive and SharePoint. I know we can use the web version for some of the apps, but for practicality's sake, it's best to have an installed version. And the cloud sync feature of One Drive is also very important for automatically backing up important work. I doubt they would let that go.

    I would love to hear if anyone can offer solutions to these problems.

    [–] [email protected] 8 points 1 year ago (2 children)

    KDE had a policy editor back in v2.0... honesty I never really followed whether those features stuck around. But the simple version is to lock down write access to folders in $HOME, such as .config or similar. Linux already prevents most users from installing programs over the system directories without root, but I'm not sure if you can restrict new programs with +x in $HOME unless you write-lock the whole folder... Someone with more network admin experience probably knows this :)

    [–] [email protected] 4 points 1 year ago

    selinux or alternative is your friend here.

    [–] [email protected] 3 points 1 year ago

    Exactly. I once had a computer with Linux where I had no root access, but was able to install, or at least unzip or build, pretty much whatever I wanted in my $HOME directory. And I wonder if it isn't possible to installs Snaps or Flatpaks without root permission?

    [–] [email protected] 6 points 1 year ago

    Outlook owa pwa is 99%

    The rest of the apps sans access work 99% in wine.

    Google docs works great

    Run NixOS don't give em root or nix-shell. They can't install anything you don't allow.

    Put each users allows softlist into source control. Make the boxes cron and reconfigure on demand.

    Tailscale VPN.

    [–] [email protected] 4 points 1 year ago (1 children)

    Office 365 [...] i know we can use the web version

    tbf, this isn't the only software related problem. a lot of companies also use specially developed software that doesn't have a linux version because everyone in the company is using windows anyways and adding a different release target would likely add costs and consume more development time for those internal tools

    [–] [email protected] 3 points 1 year ago (1 children)

    I should've mentioned I've been practically only in IT companies. We never really had speciality software of any kind. In fact I could've done all of my work in Linux except for a couple of times where I had to develop in c# and .net wasn't ported to Linux yet.

    But the things I've mentioned were what was holding the company back from giving me a Linux machine.

    [–] [email protected] 2 points 1 year ago (1 children)

    tbf i am the other extreme: i work in a material science lab so we work almost exclusively with specialized/custom software

    [–] [email protected] 2 points 1 year ago (1 children)

    Oh yeah. That's even worse because sometimes the machines outlive the computers and software and then you're stuck maintaining a Windows 95 machine because the software was developed for that OS and the company has since came up with new machines with new software and they don't support your machine anymore.

    [–] [email protected] 2 points 1 year ago

    Depending on the company you work at you can actually still encounter testing equipment built during WW2 because "it still works"