947
Distro Focuses (lemmy.ca)
you are viewing a single comment's thread
view the rest of the comments
[-] NanoooK@sh.itjust.works 1 points 1 month ago

It has SELinux, what does ubuntu (for example) has?

[-] possiblylinux127@lemmy.zip 3 points 1 month ago
[-] qqq@lemmy.world 2 points 1 month ago

AppArmor is great but it isn't nearly as powerful as SELinux. Way more user friendly though.

[-] possiblylinux127@lemmy.zip 2 points 1 month ago

It can be but it takes a lot more effort.

SELinux: high bar to entry but extremely power right away

Apparmor: lower bar to entry but much harder to get advanced functionality and control

[-] qqq@lemmy.world 1 points 1 month ago* (last edited 1 month ago)

Yea, but there are also some things AppArmor just can't do. Although in my experience most aren't as big of a deal. Things like saying "only processes of this type can bind to port X" for example and much more fine grained control of file or directory actions. Does AppArmor provide kernel module controls?

They both have really bad documentation though :(

this post was submitted on 13 Dec 2024
947 points (100.0% liked)

linuxmemes

21925 readers
2013 users here now

Hint: :q!


Sister communities:


Community rules (click to expand)

1. Follow the site-wide rules

2. Be civil
  • Understand the difference between a joke and an insult.
  • Do not harrass or attack users for any reason. This includes using blanket terms, like "every user of thing".
  • Don't get baited into back-and-forth insults. We are not animals.
  • Leave remarks of "peasantry" to the PCMR community. If you dislike an OS/service/application, attack the thing you dislike, not the individuals who use it. Some people may not have a choice.
  • Bigotry will not be tolerated.
  • These rules are somewhat loosened when the subject is a public figure. Still, do not attack their person or incite harrassment.
  • 3. Post Linux-related content
  • Including Unix and BSD.
  • Non-Linux content is acceptable as long as it makes a reference to Linux. For example, the poorly made mockery of sudo in Windows.
  • No porn. Even if you watch it on a Linux machine.
  • 4. No recent reposts
  • Everybody uses Arch btw, can't quit Vim, <loves/tolerates/hates> systemd, and wants to interject for a moment. You can stop now.
  • 5. ๐Ÿ‡ฌ๐Ÿ‡ง Language/ัะทั‹ะบ/Sprache
  • This is primarily an English-speaking community. ๐Ÿ‡ฌ๐Ÿ‡ง๐Ÿ‡ฆ๐Ÿ‡บ๐Ÿ‡บ๐Ÿ‡ธ
  • Comments written in other languages are allowed.
  • The substance of a post should be comprehensible for people who only speak English.
  • Titles and post bodies written in other languages will be allowed, but only as long as the above rule is observed.
  • ย 

    Please report posts and comments that break these rules!


    Important: never execute code or follow advice that you don't understand or can't verify, especially here. The word of the day is credibility. This is a meme community -- even the most helpful comments might just be shitposts that can damage your system. Be aware, be smart, don't remove France.

    founded 2 years ago
    MODERATORS