5

What is the core [or kernel level] difference of SELinux and Apparmor?

5

AppArmor and SELinux are both independent Linux security module (LSM) implementations. They are configured using their own specific tools. Some distributions do ship with both kernel modules, but you can select only either at boot time (stacking certain other LSM modules, such as YAMA, is however possible).

A notable practical difference between the two systems is in how rules are applied. SELinux applies security labels to every object and access control rules are written for those labels. Additionally SELinux ships with a labeling database which maps paths with default file labels, creating a sort of path-based rule database. AppArmor rules work directly with paths.

SELinux at the moment contains more features which allow more fine grained or special access controls, such as MLS and MCS. AppArmor at the moment also lacks some more basic features, such as support for fine grained networking rules.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.