• Possibly linux
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    1
    ·
    5 hours ago

    Fedora doesn’t have any more of a security focus than anything else in the industry

        • qqq@lemmy.world
          link
          fedilink
          arrow-up
          1
          ·
          4 hours ago

          AppArmor is great but it isn’t nearly as powerful as SELinux. Way more user friendly though.

          • Possibly linux
            link
            fedilink
            English
            arrow-up
            1
            ·
            3 hours ago

            It can be but it takes a lot more effort.

            SELinux: high bar to entry but extremely power right away

            Apparmor: lower bar to entry but much harder to get advanced functionality and control

            • qqq@lemmy.world
              link
              fedilink
              arrow-up
              1
              ·
              edit-2
              3 hours ago

              Yea, but there are also some things AppArmor just can’t do. Although in my experience most aren’t as big of a deal. Things like saying “only processes of this type can bind to port X” for example and much more fine grained control of file or directory actions. Does AppArmor provide kernel module controls?

              They both have really bad documentation though :(