On 2/13/25 12:53 PM, Neal Gompa wrote:
This was also discussed last year in depth: https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/Y...
To put it simply: SELinux has a larger community, it is better accepted for higher security environments, and it has a much better upstream development story.
It was first proven out with openSUSE MicroOS with Richard and myself doing the initial enablement work. I also wound up daily driving it for Tumbleweed for some time and worked with some of the security folks to resolve stuff I discovered. Overall, the experience is fairly good these days.
I've been a daily driver of SELinux on my openSUSE machines for five years now with great success and no real issues cropping up (KDE Plasma on Wayland, regular workload including gaming and software development, etc.).
Hi Neal, I followed the instructions from this link to switch from apparmor to selinux on a test system: https://en.opensuse.org/Portal:SELinux/Setup#Setup_SELinux_on_existing_tumbl... Overall everything has worked, with one exception which was addressed by an update to the selinux policies. Did you have to do anything else to switch other than those steps ? Thanks ! -- Regards, Joe