AppArmor is a Linux kernel security module that confines applications with path-based mandatory access control profiles. It is aimed at Linux administrators...
Pros
- Simpler policy syntax than SELinux for many desktop and server deployments
- Profiles can be applied incrementally in complain mode before enforcement
- Integrated into major Linux distributions including Ubuntu and SUSE
Cons
- Path-based rules are generally less granular than SELinux security labels
- Policy portability can be weaker across differing filesystem layouts
- Complex applications may require substantial profile maintenance