To view parent comment, click here.
To read all comments associated with this story, please click here.
Well openSUSE has AppArmor and a integrated firewall for starters. So you cant say that it's lacking in security.
Oh, you mean like SeLinux? Which Fedora has had just shy of for-friggin-ever now, as well as an integrated firewall. SuSE is doing good in some areas, but as far as security it's barely just starting to catch up to Fedora.
Oh, you mean like SeLinux? Which Fedora has had just shy of for-friggin-ever now, as well as an integrated firewall. SuSE is doing good in some areas, but as far as security it's barely just starting to catch up to Fedora.
I hear that SELinux is difficult to use and many just disable it because the default security policies are to strict. AppArmor has many benefits over SELinux in that respect as well as not being necessary to recompile apps to fully benefit from it. In openSUSE/SLED it is fully integrated in GUI/Ncurses YaST as well as CLI.
I'm not sure about RSBAC though. I dont recall ever seeing a DrakeConfig module for it. Interesting.
I hear that SELinux is difficult to use and many just disable it because the default security policies are to strict.
Only true it the policies are set to Strict mode which is installed by default since Fedora Core 3. The policies are targetted by default and the newest version is modular. Only issues were lack of proper documentation and tools which are now solved from Fedora Core 5. Documentations are available on
http://fedoraproject.org/wiki/SELinux/
AppArmor has many benefits over SELinux in that respect as well as not being necessary to recompile apps to fully benefit from it.
Not true at all because AppArmor will need to be rebuilt as well. Read their faqs and notice how they need to get a special version of Apache for example to applyb the context. In the case of SELinux, very few programs need to be recompiled. Check out the debate on
http://www.linux-magazine.com/issue/69/AppArmor_vs_SELinux.pdf#sear...
and http://www.nsa.gov/selinux/list-archive/0602/index.cfm#14798
FYI, nautilus now provide more details on SELinux context.








Member since:
2006-08-18
Better Java with things like Eclipse, Java applets etc by default and security features for example.
Well openSUSE has AppArmor and a integrated firewall for starters. So you cant say that it's lacking in security. Mandriva doesnt have the first though. Installing Java and Eclipse IDE is pretty simple in either distribution too. I can just search for it in YaST/RPMdrake or Smart then install it.
Perhaps I'll test drive Fedora Core 6 but it's going to take alot more than stuff I already have to impress me. :-P