Everything is a Freaking DNS problem - apparmor http://127.0.0.1:8080/blog/taxonomy/term/1002/0 en SELinux is Dead ! http://127.0.0.1:8080/blog/node/714 <p>No really it isn't but so isn't AppArmor, altough <a href="http://etbe.coker.com.au/2008/08/23/apparmor-is-dead/">Russel</a> claims it is. Weird how he totally rewords the <a href="http://news.opensuse.org/2008/08/20/opensuse-to-add-selinux-basic-enablement-in-111/">OpenSuse statements</a></p> <p>From "While our customer experience shows that AppArmor is the best solution for the vast majority of users, applications, and use cases, we want to give all of our users the ability to choose the security framework that’s appropriate for their respective environments and needs. We continue to enable AppArmor as our default Host Intrusion Prevention System......"</p> <p>To "The next step will be to make SE Linux the default and AppArmor the one that exists in a repository, and the step after that will be to remove AppArmor."</p> <p>Given <a href="https://help.ubuntu.com/community/AppArmor">Ubuntu's AppArmor adoption</a> I don't see it die that fast ...</p> <p>The real problem is who uses AppArmor or SELinux, sadly most of the installations I run into have none of both technologies enabled. Most Admins overrule their favourite distro's default config. The reason is pretty obvious as <a href="http://www.krisbuytaert.be/blog/node/335">I've</a> heard <a href="http://www.sxw.org.uk/lighting/">a lot of</a> <a href="http://en.wikipedia.org/wiki/SELinux#Quotes">intelligent</a> <a href="http://thunk.org/tytso/">people</a> say "Life Is Too short For SELinux"</p> <p>So I wonder, how can you die if you never were really alive ?</p> http://127.0.0.1:8080/blog/node/714#comments apparmor open source opensuse selinux ubuntu Mon, 25 Aug 2008 19:05:55 +0000 Kris Buytaert 714 at http://127.0.0.1:8080/blog