Before we dive in the details about SELinux, I'd like to tell you about differences and
similarities between SELinux and AppArmor.
So SELinux was developed to lock down everything.
If it's not allowed, it's denied.
AppArmor works with profiles to secure specific services, and that means that it doesn't go
for the overall approach.
AppArmor was developed as an answer to SELinux that was relatively easy to learn.
So SELinux is more complex.
But also, SELinux offers much more advanced features, such as multi-level security.
SELinux uses file system labels as its essence, and SELinux is the default in Red Hat and
related distributions.
AppArmor is the default in Ubuntu.
Now throughout the years, there has been some discussion.
What would you do?
SELinux or AppArmor?
But that discussion has been won nowadays.
SELinux is implemented by Red Hat, and SELinux is a requirement by many governmental organizations
throughout the world.