3 ms·
I like apparmor better. Set it up for high attack surface apps like browsers and vms.
by _8j50 5y ago
I like apparmor better. Set it up for high attack surface apps like browsers and vms.
- bragr 5y agoI can't say my apparmor experiences have been great. SELinux and Apparmor are just two heads of the same problematic coin. As other comments on here point out, it's easier to have one sane policy for docker and containerize everything else.
- someguydave 5y agoHow is your docker policy not something like: “give docker access to everything” ?
- _8j50 5y agoHow the hell do I dockerize firefox or vbox? I get it for server workloads but I was talking from a desktop perspective. Even if that is possible seems like even more stuff to manage and troubleshoot. Also, you are not supposed to ise containers as a security boundary??