LWN.net Logo

SELinux and AppArmor

SELinux and AppArmor

Posted Oct 16, 2009 21:17 UTC (Fri) by Cyberax (✭ supporter ✭, #52523)
In reply to: SELinux and AppArmor by rahulsundaram
Parent article: Walsh: Google Chrome Policy

AppArmor is not ideologically pure, that's why experts don't like it.

But it's _simple_. And it works.

I don't know what's inside the Chrome policy, but you can see the FireFox policy here:


(Log in to post comments)

SELinux and AppArmor

Posted Oct 18, 2009 15:47 UTC (Sun) by kleptog (subscriber, #1183) [Link]

My one run in with AppArmor was getting a weird error message from tcpdump. Turns out it was forbidden from reading files outside of /home???

Disabling AppArmor solved the problem. SELinux hasn't got a monopoly on obscure error messages.

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds