LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   SELinux is better or AppArmor? (https://www.linuxquestions.org/questions/linux-newbie-8/selinux-is-better-or-apparmor-4175682340/)

n00b_noob 09-18-2020 07:00 AM

SELinux is better or AppArmor?
 
Hello,
By default, SELinux is for Fedora and AppArmor is for Debian. You can install SELinux on Debian, then why they made AppArmor?
SELinux didn't require patching the kernel, but AppArmor need.

Thank you.

rtmistler 09-18-2020 08:17 AM

Quote:

Originally Posted by n00b_noob (Post 6167418)
Hello,
By default, SELinux is for Fedora and AppArmor is for Debian. You can install SELinux on Debian, then why they made AppArmor?
SELinux didn't require patching the kernel, but AppArmor need.

Thank you.

Have you taken the time to look them both up? Note the differences in the creators and maintainers. Perhaps that can indicate to you why there are two different products and why they have different implementations.

https://en.wikipedia.org/wiki/Security-Enhanced_Linux
https://en.wikipedia.org/wiki/AppArmor

berndbausch 09-18-2020 09:50 AM

Quote:

Originally Posted by n00b_noob (Post 6167418)
Hello,
By default, SELinux is for Fedora and AppArmor is for Debian. You can install SELinux on Debian, then why they made AppArmor?

Debian didn't make Apparmor. Besides, Apparmor existed before SELinux. Perhaps the creators of SELinux were not satisfied by the Apparmor feature set and created their own solution. Some people think that Apparmor is easier to manage.
Quote:

SELinux didn't require patching the kernel, but AppArmor need.
What do you mean by "patching"? Both Apparmor and SELinux require kernel modules.

uteck 09-18-2020 01:20 PM

Many times you see people posting about installing some package on Fedora and it does not work, and the 'solution' is usually to disable SELinux, or set to warning only. This makes it useless, since people don't take the time to learn the steps to make it work with apps. Granted that it is a bit complex, so that is a point against it.

AppArmor just seems to work and not get in the way, so point in it's favor.

SELinux was developed by the NSA and they use it. Point for and against.


All times are GMT -5. The time now is 04:29 PM.