3 ms·
Configuring SELinux reminded me of configuring email. My god, can simple systems be made more complex than this? I mean it's email and yet you have to really st
by educar 10y ago
Configuring SELinux reminded me of configuring email. My god, can simple systems be made more complex than this? I mean it's email and yet you have to really struggle with 100s of options to make sense of it all (and you do know sendmail has no public repo with a proper revision history right?).
Apparmor, in contrast, is much easier to use (granted it has it's warts) but atleast they are trying to be user friendly instead of mathematically complete.
/rant
- djsumdog 10y agoI remember going through hell trying to build an apparmour profile for an app at my last job (a Python app, which makes this a bit more complicated with interpreters, wrappers, external commands and such). I did get it built and the built in tools for aa are decent. I've never had to develop and SELinux profile. Now I don't ever want to.
- educar 10y agoI feel I need to quality what I meant by 'much easier'. AA is exactly as you made it sound - actively asocial. Now imagine how SELinux is ;)
- Patrick_Devine 10y agoThe cynic in me thinks this is a ploy for Red Hat to be able to sell more RHEL subscriptions/support. It just feels like there is no incentive to make things better.