On Monday 23 February 2026 at 00:10:03, Ken Dibble wrote:

> I know that some people have permanently disabled AppArmor because of
> the problems they have had with it.

I regard it as a "high maintenance" (in the Harry met Sally sense) enterprise
application.

For big organisations wanting to limit traffic between applications running on
their own internal servers, it's a good solution, requiring quite some effort
to configure and monitor (but a whole lot easier to manage than SElinux).

For anyone with a single machine, or a small network, behind a single IP
Internet link, I think it's just a completely unwarranted layer of complexity
which a decent (and pretty simple) set of firewall rules will do just as good a
job as.


Antony.

--
Software development can be quick, high quality, or low cost.

The customer gets to pick any two out of three.

                                                   Please reply to the list;
                                                         please *don't* CC me.