Hacker News Reader

Not much in the realm of Linux, to be honest. You'd probably get more security maintaining a SELinux setup on your system and running a hardened kernel.

View on HN

That's a different concern, though. Or does SELinux allow you to specify "process X may speak to domain Y with HTTP, but not to any other domains"?

Do you have any reference material that goes more in depth?

Reply on news.ycombinator.com