SELinux is better or AppArmor?

n00b_noob · 09-18-2020, 07:00 AM

Hello,
By default, SELinux is for Fedora and AppArmor is for Debian. You can install SELinux on Debian, then why they made AppArmor?
SELinux didn't require patching the kernel, but AppArmor need.

Thank you.

rtmistler · 09-18-2020, 08:17 AM

Quote:

Originally Posted by n00b_noob

Hello,
By default, SELinux is for Fedora and AppArmor is for Debian. You can install SELinux on Debian, then why they made AppArmor?
SELinux didn't require patching the kernel, but AppArmor need.

Thank you.

Have you taken the time to look them both up? Note the differences in the creators and maintainers. Perhaps that can indicate to you why there are two different products and why they have different implementations.

https://en.wikipedia.org/wiki/Security-Enhanced_Linux
https://en.wikipedia.org/wiki/AppArmor

berndbausch · 09-18-2020, 09:50 AM

Quote:

Originally Posted by n00b_noob

Hello,
By default, SELinux is for Fedora and AppArmor is for Debian. You can install SELinux on Debian, then why they made AppArmor?

Debian didn't make Apparmor. Besides, Apparmor existed before SELinux. Perhaps the creators of SELinux were not satisfied by the Apparmor feature set and created their own solution. Some people think that Apparmor is easier to manage.

Quote:

SELinux didn't require patching the kernel, but AppArmor need.

What do you mean by "patching"? Both Apparmor and SELinux require kernel modules.

uteck · 09-18-2020, 01:20 PM

Many times you see people posting about installing some package on Fedora and it does not work, and the 'solution' is usually to disable SELinux, or set to warning only. This makes it useless, since people don't take the time to learn the steps to make it work with apps. Granted that it is a bit complex, so that is a point against it.

AppArmor just seems to work and not get in the way, so point in it's favor.

SELinux was developed by the NSA and they use it. Point for and against.