Don Quixote de la Mancha wrote:
> Perhaps someone could post a brief note that compares and contrasts
> SELinux with AppArmor.
> 
> I am getting ready to set up SELinux on a server, but haven't actually
> started yet.  My first step would be to purchase a good technical book
> on SELinux, as what little experience I already have with SELinux
> suggests that it is not for the faint of heart.
> 
> Would I be better off using AppArmor instead?  Or could the two of
> them be used in combination?
> 
> My plan is for my server to run Apache, a modest web application,
> Postfix and the MailMan email list manager.
> 
> Thanks for any insight you can give me,

I run Fedora because it has SElinux. Other than learning how to occasionally 
revalidate a tree should you change something, it's just not a problem. Perhaps 
someone benefits from the impression that there is a problem, and if you just 
fling files around as root without getting the ownership if attributes right 
there will be. If you work on non-root files with the proper owner you are 
unlikely to see an issue.

-- 
Bill Davidsen <david...@tmr.com>
   "We have more to fear from the bungling of the incompetent than from
the machinations of the wicked."  - from Slashdot

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

Reply via email to