“Universal Blue”

Thank you, I had never heard of it. https://universal-blue.org/

I am alone in this, but I would love to see a note about what kind of a thing the seemingly endless random named things are. I was not up on the topic enough to know “Fedora Atomic Images” are a thing. (Though at an early step, that can stop. No need to define Fedora, Atomic, nor image. But enough to know programming library, Linux distro, streaming service, or program.

Like:
Bazzle (a Fedora Linux Atomic Image) has seen a massive jolt in growth over the holiday season, surpassing 50k active users. The Fedora Atomic image has gained 38.8k users total in 2025 since it began counting in April 🥳

A list of Linux Security Modules is at https://en.wikipedia.org/wiki/Linux_Security_Modules

List of Linux Security Modules

AppArmor
Integrity Policy Enforcement (IPE)[6]
Landlock[7][8]
LoadPin[9]
SafeSetID[10]
SELinux
Smack
TOMOYO
Yama[11]

As a long time SysAdmin, but not your SysAdmin, I have used two of these. Both had terrible documentation for which many “must use” paid software vendors advise disabling the Security Module as a first step.

If random software vendors’ lowest paid intern cannot figure out the settings for arbitrary Linux Security Modules, then the first line of the directions will always be to disable the security module. This leads to them not being used in many cases where the security module would be helpful.

I agree with Linus.