Re: selinux on bookworm

[Richard <rrosner5@gmail.com>]

Is there a specific reason why you want to use SELinux? AppArmor is already there and much easier to configure. SELinux usually causes more issues than AppArmor too as it's not as granular, especially on distros not made specifically for it, at least in my experience. And on Debian, some apps already have AppArmor configs in their packages. Question only is if they are in notify or enforcing mode.

Best,

Richard

Am Fr., 17. Mai 2024 um 11:05 Uhr schrieb Antonio Russo <aerusso@aerusso.net>:

Hello,

I'm trying to get selinux working on a fresh, gui-free installation of
bookworm.  I'm not trying to run any servers, nor use standard desktop
utilities (yet).  I was hoping this setup would be simple enough that
selinux would be simple to get going.

I'm following [1], which is very straightforward.  The problem I'm
getting is that it seems woefully incomplete.

[...]

Best,
Antonio

[1] https://wiki.debian.org/SELinux/Setup