DEMYSTIFY: The Choice Between SELinux or AppArmor

Overwhelmed by security options for your Linux system? SELinux and AppArmor are both powerful contenders, but which one is the best choice?

This video gives you the information to decide tbetween SELinux and AppArmor. I'll break down their functionalities, complexity, and how to choose the right one for you.

AI Thumbnail Image: SELinux and AppArmor comparison

This is a comprehensive book covering most the the common areas of Linux to secure and harden

Chapters
00:00 - Intro
00:41 - Linux Security Modules
01:57 - What is SeLinux and AppArmor?
03:28 - Core Differences
05:27 - Which one do you choose?
06:44 - Final Thoughts

Follow me:
Twitter @djware55

[stephenanthony]

AppArmor for home. SELinux for professional deployments.

[yep]

My favorite documentation about SELinux is that "SELinux coloring book" Red Hat themselves put out a while back, lol

[repairstudio]

❤ Great video as always. Perhaps a video on configuring App Amour ... SeLinux seems scary haha.

[SudLanBo]

Thx! Am new-ish(5yrs of exploring the vastness) to the *nix world & realms. Your vids help choices to be made quite easier. Much appreciated 👍

[urmensch]

Thanks for reminding me that i still need to secure my Arch Box

[SMTM]

These are the major thing I don't really do currently.

I've set up disk encryption (obviously), Firewalls (naturally), secure boot with kernel lockdown, and even the annoying (at least on KDE where there isn't a GUI applet) usbguard.

But MAC is as of yet missing.

I'd like to add one other consideration to your points. And that is compatibility.

At least Arch Linux doesn't officially support SELinux, and if you want to use it, you have to get core system tools from the AUR.

Meanwhile with something like Fedora, it's obviously already set up. All you have to do is live with it (it can certainly mess things up sometimes, at least if you develop software that plugs into the system).

[leetucker]

fascinating to watch and difficult to follow . I love this channel

[jbj]

might also be important to some that SELinux is developed by the NSA

[Artist]

This was an interesting discussion and you covered a topic I’ve been interested in delving into. I’ve have been curious about differences between AppArmor and SELinux, I’m running Fedora server on older desktop as home lab. Sometimes with SELinux feel it is too complex for me but I’m interested in learning it. I may switch to Debian Server or Ubuntu Server and take my time learning AppArmor and keep Fedora Server within VM and test it out. I’m infosec student that’s trying to understand learn about various security measures to protect my systems.

[zyghom]

how are they applicable for home lab, workstation, the computers that only one person use? needed? or overkill?

[RobertJohnson-lbqz]

Where do you download SELinux? I did a search a few days ago and I received info that indicated the OS was no longer updated...

[jemag]

Interesting video, other good topics could be seccomp or linux capabilities