30.2 AppArmor
Instead of adapting the complex SELinux system for its own distributions, Novell bought the Immunix company in 2005, renamed its Subdomain security solution to AppArmor, placed it under the GPL, and developed some YaST modules for administration for SUSE. A few years later, AppArmor was officially integrated into the kernel.
AppArmor is used by default by Debian (from version 10), SUSE, and Ubuntu. In recent years, developers employed by Canonical have been responsible for the continued development of AppArmor.
Like SELinux, AppArmor is a MAC security system. But in contrast to SELinux, AppArmor rules are based on absolute filenames. For this reason, separate tagging of all files via EAs is not necessary; moreover, AppArmor ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access