On Tue, 2026-02-10 at 08:07 +1100, Stephen Morris wrote:
> I might be treading on thin ice here, but in my view Ubuntu not having 
> Selinux is an advantage. The number of times I've had Selinux messages 
> pop up that had nothing to do with the software I was running at the 
> time, and to me were for things that were a standard part of Fedora as 
> opposed to being relative to software I had explicitly installed that 
> was external to the repositories, was nothing more than a pain that 
> shouldn't be required.

There's plenty that preferred Ubuntu's AppArmor (I don't use it, so I'm
just reading comments).

SELinux has contexts as meta information with each file (& directory),
and requires a filesystem that supports it.  It applies special or
default rules depending on the filepath, but sets them in those
filepath's metadata.

AppArmor is a thing that sits between things and filepaths, and applies
rules based on the filepath, and doesn't matter what file system is in
use.  The controls are not set into the filepaths' metadata.  And there
wouldn't be the relabelling that SELinux sometimes needs to fix things,
just updates to the rules (as needed).

So different applications of similar things.

-- 
 
uname -rsvp
Linux 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
(yes, this is the output from uname for this PC when I posted)
 
Boilerplate:  All unexpected mail to my mailbox is automatically deleted.
I will only get to see the messages that are posted to the mailing list.
 

-- 
_______________________________________________
users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://forge.fedoraproject.org/infra/tickets/issues/new

Reply via email to