Hello, Am Montag, 22. Juli 2024, 16:20:49 MESZ schrieb Johannes Segitz:
Just to make sure that this is fully understood: How AA support is handled is not something we (on the SELinux side) decide. There were discussions within SUSE to drop AA support, as it would be dead code for us going forward. I'm not a fan of the idea, as people should be free to chose in my opinion. But if this happens or not is decided by people that manage the products. And on the openSUSE side this also is depending on the project leadership keeping AA support.
I heavily rely on AppArmor, and I slightly ;-) doubt that SELinux would be a good and/or more secure replacement for the > 1200 profiles I use [1]. This also means that I'll continue to maintain the AppArmor package and my upstream contributions. As usual, I'll also help people if they need support with creating profiles, or just want a profile review. Sometimes you'll even get a "surprise review" if I notice something in a profile your package ships ;-) Regards, Christian Boltz [1] lots of them from the apparmor.d project, packaged in home:cboltz (still packaged in complain mode, but that will probably change soon). In case you wonder - a SR to that package some months ago confirmed that I'm not the only user ;-) -- Computers are really easy. There is just Zero and One, and it does not get any more complicated than that. [https://blog.koehntopp.info/2022/05/03/fertig-gelesen-the-pattern-on-the-sto...]