Don Quixote de la Mancha wrote:
Perhaps someone could post a brief note that compares and contrasts
SELinux with AppArmor.
I am getting ready to set up SELinux on a server, but haven't actually
started yet. My first step would be to purchase a good technical book
on SELinux, as what little experience I already have with SELinux
suggests that it is not for the faint of heart.
Would I be better off using AppArmor instead? Or could the two of
them be used in combination?
My plan is for my server to run Apache, a modest web application,
Postfix and the MailMan email list manager.
Thanks for any insight you can give me,
I run Fedora because it has SElinux. Other than learning how to occasionally
revalidate a tree should you change something, it's just not a problem. Perhaps
someone benefits from the impression that there is a problem, and if you just
fling files around as root without getting the ownership if attributes right
there will be. If you work on non-root files with the proper owner you are
unlikely to see an issue.
--
Bill Davidsen <davidsen(a)tmr.com>
"We have more to fear from the bungling of the incompetent than from
the machinations of the wicked." - from Slashdot