3 ms·
Tools write selinux policies, humans write apparmor policies .
by kapilvt 6y ago
Tools write selinux policies, humans write apparmor policies .
- VWWHFSfQ 6y agoapparmor is dead at this point right. selinux is the standard
- nisa 6y agocould you explain why you think so? We are are Debian/Ubuntu shop and it looks like it's all AppArmor.
- totony 6y agoAppArmor is used by debian/ubuntu, while selinux is used by Redhat and Android. Don't think any of them is more dead than the other. The refpol used by redhat isn't very restrictive/complete and no one except for big corps are using it. Apparmor is barely looked at too in my experience.
- TimWolla 6y agoIn fact AppArmor was only "recently" enabled by default in Debian starting with Debian Buster: https://www.debian.org/releases/stable/amd64/release-notes/ch-whats-new.en.html#apparmor https://www.debian.org/releases/stable/amd64/release-notes/c...
- kapilvt 6y agoapparmor is also the default linux security module for suse
- LinuxBender 6y agoBoth tools can be managed by both tools and humans. SELinux is for Redhat distros and operates on inodes. AppArmor is for the Ubuntu distros and operates on files/dirs. Each have pros and cons, too long to cover here at HN.