Don Quixote de la Mancha wrote: > Perhaps someone could post a brief note that compares and contrasts > SELinux with AppArmor. > > I am getting ready to set up SELinux on a server, but haven't actually > started yet. My first step would be to purchase a good technical book > on SELinux, as what little experience I already have with SELinux > suggests that it is not for the faint of heart. > > Would I be better off using AppArmor instead? Or could the two of > them be used in combination? > > My plan is for my server to run Apache, a modest web application, > Postfix and the MailMan email list manager. > > Thanks for any insight you can give me, I run Fedora because it has SElinux. Other than learning how to occasionally revalidate a tree should you change something, it's just not a problem. Perhaps someone benefits from the impression that there is a problem, and if you just fling files around as root without getting the ownership if attributes right there will be. If you work on non-root files with the proper owner you are unlikely to see an issue. -- Bill Davidsen <davidsen@xxxxxxx> "We have more to fear from the bungling of the incompetent than from the machinations of the wicked." - from Slashdot -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
