3 ms·
How does grsecurity compare to SELinux and AppArmor? Aren't SELinux and AppArmor both in the kernel?
by massysett 10y ago
How does grsecurity compare to SELinux and AppArmor? Aren't SELinux and AppArmor both in the kernel?
- viraptor 10y agoGrsec consists of a few systems. One of them is RBAC, which is an access control part for userspace applications. It works similar to selinux/apparmor, but it's not based on LSM interface (as far as I know, but feel free to correct me). Compared to SELinux, RBAC misses some very specific features, like dbus calls filtering for example, but otherwise those 3 systems are fairly comparable. RBAC uses AppArmor approach of filtering based on paths rather than inodes/attributes. But grsec as a whole is much larger. It prevents way more attacks at kernel and userspace level than LSM implementations can see. https://grsecurity.net/compare.php https://grsecurity.net/compare.php should give you a general idea. Also, there's nothing preventing you from using selinux, apparmor, or something else with grsec kernel - they can still run together.