My application relies heavily on AppArmor for security. I use Ubuntu to host it myself, but I have gotten requests from others that want to host in on a Fedora or RHEL machine.
Now I am aware that Redhat prefers people to use SElinux instead of AppArmor. However, I have looked into it, and I think it is going to be very hard to translate my AppArmor profiles to SElinux policies. Furthermore, I don't think it is very linux-like to force software on the user. Ubuntu for example supports both SElinux and AppArmor and leaves it up to the user. I don't see why Redhat wouldn't do the same.
Anyway, most of the stuff on google about rhel + apparmor is pretty outdated. How is the support of AppArmor in the latest versions of RHEL / Fedora? Is it possible to get it working without manually building a kernel? Are there any packages available?
Best Answer
I think you're out of luck - it looks like you have to create a custom kernel for RHEL/CentOS and even then it's experimental (old CentOS 5.5).