SELinux and AppArmor

SELinux and AppArmor are different ways that an administrator can add security policies to Linux. SELinux is a set of modifications to the Linux kernel that provide a finer level of access control than the traditional discretionary access model. This is done through labels or contexts, which are attached to objects, including users, files, directories, processes, and network ports. Access from one labelled object to another is governed by a set of policies and enforced by the kernel. By default, SELinux blocks anything not allowed by an explicit access rule. AppArmor is a mandatory access control system like SELinux included by default on Ubuntu, Mint, and OpenSUSE.