AppArmor or SELinux Topic is solved

Have some feedback, questions, suggestions, or just fancy a chat? Pop it in here.
Post Reply
FredSki
Posts: 1
Joined: Thu Feb 01, 2018 9:50 am

AppArmor or SELinux

Post by FredSki »

Hi,

Are there any instructions on enabling security frameworks like AppArmor or SELinux in DietPi?

- FredSki
User avatar
MichaIng
Site Admin
Posts: 2295
Joined: Sat Nov 18, 2017 6:21 pm

Re: AppArmor or SELinux

Post by MichaIng »

apt install apparmor

Simply follow any guide for Debian. AppArmor is something we might add by default, but some custom rules are required to make it fully compatible with all provided software installs. E.g. by default or blocks MariaDB from accessing the database through symlinks but we symlink /var/lib/mysql by default to /mnt/dietpi_userdata/mysel.
fakert
Posts: 1
Joined: Sun Mar 08, 2020 9:29 am

Re: AppArmor or SELinux

Post by fakert »

On the off chance that you take a gander at SELinux and Apparmor, they are both solid and frail in similar manners. SELinux is "more grounded" in that it can get considerably more finely grained access to records, yet what does that increase an aggressor over being in an apparmor profile? You're now essentially confined in an apparmor profile. Things being what they are, do you genuinely increase considerably more with SELinux?
Kodi Lucky Patcher nox
User avatar
MichaIng
Site Admin
Posts: 2295
Joined: Sat Nov 18, 2017 6:21 pm

Re: AppArmor or SELinux

Post by MichaIng »

AppArmor seems to generally much easier to configure, but less flexible. However I tend in AppArmor direction and add profiles or each software title we offer, where required.
Post Reply