2 ms·
This is exactly my experience. To expand a little, for a vertically integrated OS like Android or RHEL (official packages only!) SELinux can work. For a sysad
by RVuRnvbM2e 4y ago
This is exactly my experience.
To expand a little, for a vertically integrated OS like Android or RHEL (official packages only!) SELinux can work.
For a sysadmin trying to configure a custom service or anything outside official repositories then AppArmor is actually usable where SELinux isn't.
But what you probably want is a Docker (or Podman) container, which gets you 90% of the hardening with 1% of the effort.
If a container isn't viable for whatever reason, then a systemd "contained" service is also very easy to configure. See `man systemd.exec`.