1

can someone explain to me why SELinux is officially broken under Ubuntu while AppArmor works fine? AppArmor is build on the "Linux Security Modules" framework and so is SELinux. As a result, shouldn't both run smoothly under Ubuntu?

I probably have a wrong understanding of the "Linux Security Modules" framework.

Thanks!

Improve this question
1
  • 1
    I think I read somewhere that they are incompatible. (but I am not an expert)
    – ctrl-alt-delor
    Commented Dec 21, 2020 at 22:46

1 Answer 1

Reset to default
1

This is not about the kernel, but about the userspace. SELinux runs OK in the Ubuntu kernel (I guess), but there is a lot to be done for SELinux to work on the userspace side. Files need to have sensible default labels, contexts need to be defined for processes and so on. And if this is not updated periodically, then SELinux is effectively broken (it would block legitimate operations or allow dangerous ones), therefore the disclaimer.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .