[arch-general] Experiences with SELinux on Arch

João Miguel jmcf125 at openmailbox.org
Wed Jan 27 16:00:20 UTC 2016


Hello,

I too was trying SELinux but gave up, it was more trouble than it was
worth. You may want to try Apparmor, it's what I put my efforts into
afterwards and is easier to manage and understand. It requires compiling
the kernel as well, but no patches to anything else. You can easily
create profiles yourself (much easier than SELinux policies), completely
sandboxing any process you want.

Hope this helps,
João Miguel


More information about the arch-general mailing list