Post #3454693
2026-06-28 16:15 UTC
Replies (1)
-
@spoofy@mastodon.com.pl 2026-06-28 18:14
@grono@mastodon.com.pl well, I'm bigger fan of AppArmor instead of SELinux. Novell has done a great job, in fact, it pioneered practical implementations (e.g., changing the “hats” in mpm_prefork, etc.), which were subsequently adopted by Ubuntu and then merged into Debian. I would like to point out here that, for example, the Austrian Debian distribution Proxmox uses AppArmor for unprivileged containers (LXD and Incus as well). Ultimately, when it comes to Linux-based MAC/RBAC, AppArmor is, in my humble opinion, better - it offers greater control, is simpler to implement, and the ability to dynamically change HATs and quickly extend profiles is more convenient for me. As for OpenSUSE itself - I always see the same issue - whether to align more closely with Debian or Red Hat, and this is the source of disagreements over which standard to adopt.