What is the core [or kernel level] difference of SELinux and Apparmor?
-
Did you check cyberciti.biz/tips/selinux-vs-apparmor-vs-grsecurity.html?– randominstanceOfLivingThingCommented Dec 19, 2017 at 17:54
-
As i have mentioned in the question I wanted core or kernel level difference between them not pro's and con's. And Gresecurity is not even a security tools.– arifCommented Dec 19, 2017 at 17:58
-
2related: security.stackexchange.com/questions/29378/…– Ciro Santilli OurBigBook.comCommented Jan 31, 2019 at 12:35
Add a comment
|
1 Answer
AppArmor and SELinux are both independent Linux security module (LSM) implementations. They are configured using their own specific tools. Some distributions do ship with both kernel modules, but you can select only one at boot time (stacking certain other LSM modules, such as YAMA, is however possible).
A notable practical difference between the two systems is in how rules are applied. SELinux applies security labels to every object and access control rules are written for those labels. Additionally SELinux ships with a labeling database which maps paths with default file labels, creating a sort of path-based rule database. AppArmor rules work directly with paths.
SELinux at the moment contains more features which allow more fine grained or special access controls, such as MLS and MCS. AppArmor at the moment also lacks some more basic features, such as support for fine grained networking rules.
