Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

This wiki page on using SELinux with Ubuntu informs of the following:

The Ubuntu-specific "selinux" and "selinux-policy-ubuntu" packages documented here have not received much attention since Karmic, and appear to be effectively broken in Precise.

So does it make sense to even consider installing SELinux with the purpose of making a general-purpose Web server running on Ubuntu 12.04 more secure? What are the potential problems that SELinux can bring into an Ubuntu Web server?

share|improve this question

1 Answer 1

up vote 1 down vote accepted

I think in the case of a web server, SELinux is probably overkill. Talking with the "ubuntu-hardened" folks the focus seems to be on Apparmor. I think this is fine and you can further lock down the Apparmor Apache profile if you want. Assuming your running Apache and SSH. I would run them both in their own chrooted environments.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.