• 4 Posts
  • 219 Comments
Joined 5 months ago
cake
Cake day: June 30th, 2025

help-circle















  • It’s for permission management. Usually the user does not see it really.

    Basically, if a hacker gains access to something, selinux secures your system by limiting the scope the attacker can gain.

    Ubuntu uses apparmor.

    I’m not deep in both topics to judge which one is actually better. I am just used to selinux and it’s good. I remember that peoplr claimed apparmor to be easy and selinux to be difficult to handle but I can’t confirm that. For my podman containers I simply add “:Z” to the paths which the container shall have access to and I know that it can’t gain access to any other location because of this Z and selinux. If I have to debug selinux, I run sudo setenforce 0 and if it then works, I can look deeper into it.