4 ms·
OpenSUSE as well as Arch, Debian and Ubuntu uses apparmor and I never had a problem where I had to disable it. apparmor is less complex but SELinux can be fine
by baldfat 10y ago
OpenSUSE as well as Arch, Debian and Ubuntu uses apparmor and I never had a problem where I had to disable it.
apparmor is less complex but SELinux can be fine tuned at the cost of pulling out your hair with what security gain? The BIG ISSUE is the KERNEL SELinux and apparmor have the same policy with Linux Kernel aka both of them can be bypassed and a hacker can just focus on the Kernel.