Novell releases AppArmor [LWN.net]

Novell releases AppArmor

Posted Jan 13, 2006 13:59 UTC (Fri) by davecb (subscriber, #1574)
In reply to: Novell releases AppArmor by nix
Parent article: Novell releases AppArmor

I used to work on B2 Multics, and never even noticed that
they were running mandatory security. I've since lived
for some years with a Trusted Solaris 7 system, and
only the sysadmin was different. I expect SE Linux
will become as easy to use.

And, just by the way, the labels are things like
"secret" "confidential" and "unclassified", not
labels like filenames.

--dave

(Log in to post comments)

Novell releases AppArmor

Posted Jan 13, 2006 21:05 UTC (Fri) by nix (subscriber, #2304) [Link]

Well, yes, except that in SELinux all security policies are applied to types (which are a labelling scheme of sorts, therefore). This means that you end up needing a *lot* of types and a massive tangle of relationships between files, types, and security policies...

... I can see that it's more flexible than AppArmor, but ye gods is it also more complex, and TBH most of us just don't need that complexity.