AppArmor / Selinux conflict

Oliver Grawert ogra at ubuntu.com
Tue Feb 5 14:15:47 UTC 2019


hi,
Am Dienstag, den 05.02.2019, 14:06 +0100 schrieb Antonio Carretero
Barroso:
> Hi list, 
> 
> I uninstalled apparmor but still is initialized and the system can't
> enable SELinux. 
> 
not sure what you mean by "i uninstalled..." 

apparmor (as well as selinux) is a kernel feature, you can only en-
disable it on the kernel boot cmdline, no matter if you en/disable or
remove the userspace tools:

https://www.kernel.org/doc/html/v4.15/admin-guide/LSM/apparmor.html

apparmor as well as selinux userspace tools will detect if you have
turned on one or the other at boot inn the kernel and disable
themselves accordingly, you do not need to remove any debs ...

also note that many bits in ubuntu make use of apparmor and you might
end up with reduced security and functionality...

ciao
	oli
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20190205/87a3d3c2/attachment.sig>


More information about the ubuntu-users mailing list