Re: AppArmor about to be merged into the kernel?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Don Quixote de la Mancha wrote:
> Perhaps someone could post a brief note that compares and contrasts
> SELinux with AppArmor.
> 
> I am getting ready to set up SELinux on a server, but haven't actually
> started yet.  My first step would be to purchase a good technical book
> on SELinux, as what little experience I already have with SELinux
> suggests that it is not for the faint of heart.
> 
> Would I be better off using AppArmor instead?  Or could the two of
> them be used in combination?
> 
> My plan is for my server to run Apache, a modest web application,
> Postfix and the MailMan email list manager.
> 
> Thanks for any insight you can give me,

I run Fedora because it has SElinux. Other than learning how to occasionally 
revalidate a tree should you change something, it's just not a problem. Perhaps 
someone benefits from the impression that there is a problem, and if you just 
fling files around as root without getting the ownership if attributes right 
there will be. If you work on non-root files with the proper owner you are 
unlikely to see an issue.

-- 
Bill Davidsen <davidsen@xxxxxxx>
   "We have more to fear from the bungling of the incompetent than from
the machinations of the wicked."  - from Slashdot

-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux