Linux security non-modules and AppArmor
Posted Jun 28, 2007 11:42 UTC (Thu) by grandinj
In reply to: Linux security non-modules and AppArmor
Parent article: Linux security non-modules and AppArmor
And the reply from the AppArmour guys would be that SELinux tries to be too many things to too many people.
You're effectively trying to win this debate by decree.
AppArmour may not be perfect, and it may not provide perfect protection, but it provides a valuable amount of extra protection for a fairly minimal amount of work, and it does so in a way that mere mortals find reasonably easy to work with.
It's a classic case of theory vs. practice. In theory, SELinux is the best choice, but in the Real World (tm), for the "invisible majority" of users, AppArmour is good enough.
to post comments)