Posted May 4, 2006 16:56 UTC (Thu) by alogghe
Parent article: The AppArmor debate begins
As I understand it-
You can't secure a mounted nfs share with SELinux because it can't apply its labels (and I wonder which other filesystem types that wouldn't work either).
AppArmor would allow you to secure (to the level apparmor does) pretty much any path in the system and so you can secure an nfs/smb/anything mount.
For me this is pretty critical in making a choice of security systems.
Attention captain obvious- nfs security shortcomings are offtopic in replies ;) .
to post comments)